Add branch-protection tooling + security/CI/AI-SDLC hardening#2

Merged

DenWin merged 3 commits into

mainfrom

setup/branch-protection-tooling

Jul 16, 2026

Commits on Jul 16, 2026

Add one-time branch-protection tooling in setup/

DenWin
and
claude
committed
Add security, CI, and AI-SDLC hardening derived from the ai-lab review

DenWin
and
claude
committed
Revert semgrep to opt-in overlay; keep rules, drop active wiring

DenWin
and
claude
committed