Security guidance

Security posture for builders and operators.

Placeholder for auth, encryption, audit, and data handling.