## What does this PR do?

<!-- Brief description -->

## Checklist

- [ ] Tested on my Mac (`aad checkup` runs without errors)
- [ ] New check follows the pattern in CONTRIBUTING.md
- [ ] Every finding has a plain-english `summary` and a `fix`
- [ ] No system state is modified (read-only checks only)
- [ ] macOS-native tools only (no cross-platform abstractions)
