docs: post-cutover + Kuzu 0.11 sweep (#160) #199

Job	Run time
Semgrep (SAST)	26s
Trivy (filesystem + container scan)	13s
jscpd (duplication < 3% on touched code)	23s
SBOM (SPDX + CycloneDX)	18s
OSV-Scanner (SCA)	5s
Gitleaks (secret scan)	12s
	1m 37s

Provide feedback