chore: remove test-new-api.js, update README security section

- Delete obsolete test-new-api.js (replaced by tests/smoke.test.ts)
- Remove test-new-api.js from eslint ignores
- Add SECURITY_ASSESSMENT.md description in README

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: cablate

README.md

@@ -221,7 +221,7 @@ tests/
 - DNS rebinding protection available for production
 - Input validation using Zod schemas
 
-For enterprise security reviews, see [Security Assessment Clarifications](./SECURITY_ASSESSMENT.md).
+For enterprise security reviews, see [Security Assessment Clarifications](./SECURITY_ASSESSMENT.md) — a 23-item checklist covering licensing, data protection, credential management, tool contamination, and AI agent execution environment verification.
 
 ## Changelog
 

eslint.config.js

@@ -3,7 +3,7 @@ import tseslint from "typescript-eslint";
 import prettierConfig from "eslint-config-prettier";
 
 export default tseslint.config(
-  { ignores: ["dist/", "test-new-api.js"] },
+  { ignores: ["dist/"] },
   eslint.configs.recommended,
   ...tseslint.configs.recommended,
   prettierConfig,