chore: strengthen backend eslint profile

src/integrations/tbank/tbank-source.policy.spec.ts

@@ -8,6 +8,7 @@ describe('request-driven source freshness', () => {
     '%s expires at its boundary without changing source time',
     (source) => {
       const fetchedAt = new Date('2026-09-01Z');
+      // eslint-disable-next-line security/detect-object-injection -- The key comes from the local source-policy test table.
       const ttl = tbankSourceTtlMs[source];
       expect(
         tbankSourceNeedsRefresh(