docs: post-cutover + Kuzu 0.11 sweep (CLAUDE/PROJECT_SUMMARY/AGENTS/SECURITY/CHANGELOG) #198

Job	Run time
Trivy (filesystem + container scan)	12s
OSV-Scanner (SCA)	7s
Gitleaks (secret scan)	13s
Semgrep (SAST)	21s
jscpd (duplication < 3% on touched code)	18s
SBOM (SPDX + CycloneDX)	21s
	1m 32s

Provide feedback