Enabler E2: Security baseline (Dependabot, secret scanning, Stripe webhook verification, .env.example)

[Delqhi]

[Delqhi]

✅ Progress: Security Baseline (E2)

Dependabot — added to all 4 canonical repos:

• OpenSIN-Code #1118 (feat/add-codeowners)
• OpenSIN-backend #1175 (feat/add-codeowners)
• OpenSIN-WebApp feat: Document A2A-SIN-Box-Storage in SSOT #15 (feat/add-codeowners)
• OpenSIN-documentation already had .github/dependabot.yml

.env.example — confirmed present in all 4 canonical repos ✅

Secret scanning — pending org-level enable (requires admin action). No code change needed; just toggle per-repo security settings.
Stripe webhook verification — pending implementation in OpenSIN-backend (billing webhook signature check). Will file separate ticket.

All required files (AGENTS.md, SECURITY.md, LICENSE, README.md) already present from E1.

Verification command (run per repo):

gh api repos/OpenSIN-AI/<repo>/contents/.github/dependabot.yml --jq '.name'

Part of CEO Directive #40.