From Hardcoded to Secure: Refactoring Legacy .NET Apps in 5 Steps