**Area:** Security - Documentation **Task:** Document security hardening approach --- *Auto-populated from CodeQL security alerts*