ln-760-security-setup

Coordinates security scanning (secrets + deps). Delegates to ln-761 and ln-625 (mode=vulnerabilities_only). Generates SECURITY.md, pre-commit hooks, and CI workflow.