docs(security): document deterministic tool-scanner detect engine (Spec 076 T022)

docs(security): document deterministic tool-scanner detect engine (Spec 076 T022) #725