Add sanitizer and static analysis guardrails

[yingyue2030699]

Summary

• Add sanitizer and static analysis guardrails for upgrade validation.
• Capture commands/configuration for catching memory and static-analysis issues.

Validation

• Run the sanitizer/static-analysis commands documented in the branch.

[yingyue2030699]

Mergeability review:

1. Content: Directionally aligned with the stated goal. The PR adds sanitizer/static-analysis build flags, Makefile targets, helper scripts, and guardrail documentation/backlog notes.
2. Verification: Not verified on the current target branch. GitHub reports no checks for this branch. A non-destructive git merge-tree origin/master codex/upgrade-sanitizer-static reports a real content conflict in CMakeLists.txt, so the merged result cannot be tested as-is. Also, the backlog text still describes the older missing bonded-complex declarations; current master has moved to a duplicate Parameters::bondedComplexWrite build failure, so the docs need refresh after rebasing.
3. Dependency: No unfinished PR dependency is the main blocker. The blocker is merge conflict/staleness against current master.

Decision: Not mergeable right now. Rebase/update the branch against current master, resolve the CMakeLists.txt conflict, refresh the backlog note, and rerun the documented sanitizer/static-analysis validation.