Add Sandi Metz’s rules.
Avoid direct use of `$http` in Angular controllers.
Prefer DI to stubbing in testing.