Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Bring in check-nextjs-rce.sh and README-scanner.md from existing Gitea repo, plus npm-security-check.sh from local bin/security.