feat: dd-trace 5.0 to 6.0 - report iast security controls programmatic config

[mohab-sameh]

Summary

Report iast.securityControlsConfiguration and
experimental.iast.securityControlsConfiguration because v6 only accepts
DD_IAST_SECURITY_CONTROLS_CONFIGURATION.

Detection Criteria

Detect securityControlsConfiguration under top-level iast or
experimental.iast in dd-trace init options.

Transformation Logic

Do not rewrite automatically. Record a warning/metric pointing maintainers to
DD_IAST_SECURITY_CONTROLS_CONFIGURATION.

Covered by the optional report-only AI step in
codemods/move-experimental-iast-options and by the final review step in
codemods/dd-trace-5-to-6-migration-recipe.

Before / After Example

tracer.init({
  iast: {
    securityControlsConfiguration: "..."
  }
});

Manual action: move the value to DD_IAST_SECURITY_CONTROLS_CONFIGURATION.

Notes / Edge Cases

The target env file cannot be inferred safely across repositories.