PR Summary

Low Risk
Adds two static strings to a known-path allowlist; no auth, persistence, or extraction logic changes.

Overview
Extends MaintainerService.KNOWN_PATHS so root-level security-insights.yml and security-insights.yaml are treated like the existing security-insights.md entry.

Repos that publish Security Insights in YAML will get the full-path governance score during candidate ranking, appear in the AI maintainer-file examples, and skip unnecessary section filtering when those paths are selected for extraction.

^{Reviewed by Cursor Bugbot for commit 876ddcf. Bugbot is set up for automated code reviews on this repo. Configure here.}

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.