Initial commit: omp-security DSH plugin (oh-my-pi port) with docs and tests

package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@local/omp-security",
+  "version": "1.0.0",
+  "description": "oh-my-pi style security_scan tool for DSH: semgrep, bandit, gitleaks, osv-scanner and npm audit plus AI triage, with prioritized reports and finding validation.",
+  "private": true,
+  "type": "module",
+  "license": "MIT",
+  "exports": { ".": "./index.js", "./package.json": "./package.json", "./locale/*.json": "./locale/*.json" },
+  "files": ["index.js", "lib/*.js", "cordis.patch.yml", "locale/*.json"],
+  "scripts": { "test": "node --test test/*.test.mjs" },
+  "dsh": { "bundle": { "patch": "./cordis.patch.yml" } }
+}