Semgrep Supply Chain Rule Pack Runner

Runs Semgrep code and supply-chain checks with `semgrep scan`, registry rule packs, and dependency-aware findings to surface risky patterns early. Useful when agents need to summarize security results in repository terms developers can act on immediately.