docs: mirror residual security planning references

style: apply model-manager autofixes

fix(security): make model import path proof explicit

fix(security): detach audit traces from request taint

fix(security): remove residual audit hash and log sinks

fix(security): remove audit identifier persistence

style: apply codeql workflow autofixes

ci(security): add codeql workflow baseline

style: apply pre-push autofixes

fix(ci): restore defusedxml dependency parity

style: apply pre-push black autofixes

docs(security): replace wechat app id sample

fix(security): remove residual token hash indexing

test(security): harden notification regex sanitization

fix(security): harden connector ingress parser paths