Security Audit Bot

Performs security audits on Next.js, Payload, and Vercel apps, scoring P0/P1/P2 issues with evidence and holding merges until approved.