feat(incremental): delta-aware index + enrich (skip-by-hash + manifes… #227

Job	Run time
OSV-Scanner (SCA)	6s
SBOM (SPDX + CycloneDX)	16s
jscpd (duplication < 3% on touched code)	18s
Gitleaks (secret scan)	14s
Semgrep (SAST)	20s
Trivy (filesystem + container scan)	9s
	1m 23s

Provide feedback