Audit

Read-only health check and security audit — structural validation, upstream comparison, OWASP Top 10, secret detection, injection patterns, supply chain, shell hardening