Add comprehensive bug report for StatIQ Flutter app

[Copilot]

Static analysis and code review of the StatIQ codebase to identify bugs, security issues, and code quality problems.

Critical Issues Found

• API keys hardcoded in source (lib/constants/api_config.dart) - JWT tokens exposed in version control
• Math bug in scoring (lib/services/vex_iq_scoring.dart:550) - Standard deviation uses variance * variance instead of sqrt(variance)

// Current (wrong)
final stdDev = variance > 0 ? (variance * variance) : 0;

// Should be
final stdDev = variance > 0 ? math.sqrt(variance) : 0.0;

High Severity

• Season ID mismatch: app_constants.dart uses 192, api_config.dart uses 196
• Unused grade parameter in getPerformanceTier() despite signature suggesting grade-based logic
• Debug prints in production code paths

Medium Severity

• 100+ print statements with emojis in robotevents_api.dart
• Commented imports indicating incomplete refactoring
• Hardcoded season date boundaries (Aug-June)

Additional Findings

• Inconsistent error handling (throws vs returns empty vs returns null)
• Limited test coverage (single test file)
• Magic numbers without constants
• Long widget build methods (100+ lines)

Full details in BUG_REPORT.md with line numbers, code examples, and suggested fixes.

Original prompt

find issues in this app and prepare a bug report for me to fix

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.