[Repo Auditor] Security Review

[saagpatel]

Security Review

Security posture actions that should be reviewed and tracked now.

Suggested actions

• Enable CodeQL default setup (high, effort medium)
  • GitHub code scanning is not configured, so code-level findings are not being surfaced.
  • Expected lift: 0.120 on security_posture