Shift-left security

The DevSecOps practice of moving security checks (SAST, secret scanning, vuln review) early into the pre-merge gate rather than after deploy.

grounded in: doctrine verification layer + commit c46c99b naming the SAST pass as the deploy gate's code-vulnerability scan, with secret scan also enforced pre-ship