fix(quality): close remaining CodeQL findings on touched files

Aligns the lines already modified in this branch with the closure
work done on codeql/3-correctness so the two branches do not
conflict on merge.

- CMSFile.cs: seal the class to close cs/virtual-call-in-constructor
  (no inheritor in C#, no mocking, no UseLazyLoadingProxies).
- CompetencyController.UpdateComptency: drop the now-dead
  `CompetencyId <= 0` check. The preceding FindAsync already returns
  NotFound when the row is missing; an existing row's identity
  column is always a positive int.
- Program.cs SetAwsCredentials: trim the RegionEndpoint value, look
  it up with BindingFlags.IgnoreCase, and fall back to USWest1 when
  the name is non-empty but does not match any known region. The
  previous ternary could leave profile.Region as null on unknown
  region names.

Author: rlorenzo

web/Areas/CMS/Models/CMSFile.cs

@@ -2,7 +2,7 @@
 
 namespace Viper.Areas.CMS.Models
 {
-    public class CMSFile : File
+    public sealed class CMSFile : File
     {
         public string FriendlyURL { get; set; }
 

web/Areas/CTS/Controllers/CompetencyController.cs

@@ -136,10 +136,6 @@ public async Task<ActionResult<CompetencyDto>> UpdateComptency(int competencyId,
                 return NotFound();
             }
 
-            if (competency.CompetencyId <= 0)
-            {
-                return BadRequest("CompetencyId is required.");
-            }
             if (competency.Name.Length < 2 || competency.Number.Length < 1)
             {
                 return BadRequest("Name and Number are required.");

web/Program.cs

@@ -1,4 +1,5 @@
 using System.Net;
+using System.Reflection;
 using System.Security.Claims;
 using System.Text.Json.Serialization;
 using System.Text.RegularExpressions;
@@ -561,10 +562,17 @@ void SetAwsCredentials(Logger logger)
 
         var profile = new CredentialProfile("default", options);
         // if a region was specified in the xml then use the specified region else default to USWest1
-        var regionFieldName = xAwsCredentials.Element("RegionEndpoint")?.Value;
-        profile.Region = !string.IsNullOrWhiteSpace(regionFieldName)
-            ? typeof(RegionEndpoint).GetField(regionFieldName)?.GetValue(null) as RegionEndpoint
-            : RegionEndpoint.USWest1;
+        var regionValue = xAwsCredentials.Element("RegionEndpoint")?.Value.Trim();
+        if (!string.IsNullOrWhiteSpace(regionValue))
+        {
+            const BindingFlags regionFieldFlags = BindingFlags.Public | BindingFlags.Static | BindingFlags.IgnoreCase;
+            profile.Region = typeof(RegionEndpoint).GetField(regionValue, regionFieldFlags)?.GetValue(null) as RegionEndpoint
+                ?? RegionEndpoint.USWest1;
+        }
+        else
+        {
+            profile.Region = RegionEndpoint.USWest1;
+        }
         var netSDKFile = new NetSDKCredentialsFile();
         netSDKFile.RegisterProfile(profile);