dockerize

refactor: extract drainBody helper and fix unchecked error returns in HTTP/socket wait

Expand main_test.go with targeted unit tests for the new main.go helper

Continue the main.go complexity reduction by extracting the remaining ex

Refactor main.go to extract flag setup and parsed runtime state into sma

Update the checkout step in `.github/workflows/codeql.yml` to add `persi