Public scan API — running anonymous one-off compliance checks without an account. Results cached for 30 days.