Audit services, plugins, and form classes; introduce proper dependency injection where static access remains.