Leakage check is correlation-only

[siddharthgaur1]

Catches a copied target but not a categorical that encodes the target, or leakage via a group key. Add mutual information scoring and a target-encoding audit to close the gap.