sec: false positive — suppress SonarCloud SQL injection alerts in ProfessionalContactDaoImpl.java and HRMDocumentDao.java (whitelist-validated)