Double Threat: How AI Code Review Eradicates SQL Injection and Hardcoded Secrets