PMD rules complementing checkstyle. Adds checks checkstyle does not cover: resource leaks, string ==, empty control flow, god-class/size hints and complexity. Currently report-only; becomes a hard gate after the SRP refactor. UnusedImports is excluded (handled by checkstyle).