Replace $queryRawUnsafe with Prisma $queryRaw tagged template literals to eliminate SQL injection in findComparables() and getHeatmapWard(). Update tests to match the new parameterized query approach. Co-Authored-By: Paperclip <noreply@paperclip.ing>