A full location-by-location methodology for building a Cryptographic Bill of Materials — where crypto actually lives, how to find it, and how to fix it.