chore: security workflow (gitleaks, pip-audit, npm audit, trivy) (#11… #21

Job	Run time
Unit tests	10s
Lint & Format	12s
Type Check	15s
Commit-type sync	7s
Architecture (import-linter)	13s
Branch-protection contexts sync	12s
Coverage	14s
Pre-commit	1m 5s
	2m 28s

Provide feedback