[Rule Improvement] [Improvement]: Add ORM-specific safe examples to TG-AUTH-006 (Mass Assignment)

[githubmofo]

🔍 Rule ID

TG-AUTH-006 (Mass Assignment and Property-Level Authorization)

❓ What needs improvement?

Currently, TG-AUTH-006 only provides generic JavaScript object destructuring examples. However, most modern AI-built applications use ORMs/ODMs like Prisma, Mongoose, Drizzle, or TypeORM.

🎯 Expected Behavior

Developers and AI agents should have copy-pasteable safe examples for popular ORMs so they don't accidentally pass raw request bodies directly into database update methods.

💡 Suggested Solution

Add safe code snippets to rules/authorization/TG-AUTH-006-mass-assignment.md:

1. Prisma: Using Zod schema parsing before prisma.user.update().
2. Mongoose: Using explicit field picking (lodash.pick or explicit object literals) instead of passing req.body.