Add continuous vulnerability auditing for Python dependencies

[konard]

Summary

• add a scheduled, push, and pull-request gate for vulnerabilities in resolved Python dependencies
• resolve all pyproject.toml optional extras and docs/requirements.txt in an isolated target environment
• pin pip-audit 2.10.1 in a separate tool environment so scanner dependencies do not contaminate audit results
• enforce workflow coverage for every declared dependency surface with a regression test

Reproduction

Before this change, .github/workflows/security.yml ran dependency review only for pull requests. A new advisory affecting an unchanged dependency therefore had no continuous gate.

Verification

• python scripts/audit_dependencies.py (No known vulnerabilities found)
• pytest --cov=src --cov-report=term (74 passed, 100% package coverage)
• ruff check .
• ruff format --check .
• mypy src/
• python scripts/check_file_size.py

Fixes #58

[konard]

Working session summary

Implemented and finalized PR #59.

• Added scheduled, push, and PR vulnerability auditing with pinned pip-audit==2.10.1.
• Audits all pyproject.toml extras and docs/requirements.txt in an isolated environment.
• Added regression coverage ensuring every dependency surface is mapped.
• Added security changelog entry.
• Local suite: 74 tests passed; Ruff, mypy, formatting, coverage, and file-size checks passed.
• Fresh CI on commit 546d073 is fully green.
• PR is ready for review, mergeable, and the working tree is clean.

---

This summary was automatically extracted from the AI working session output.

[konard]

🤖 Solution Draft Log

This log file contains the complete execution trace of the AI solution draft process.

💰 Cost estimation:

• Model: GPT-5.6 Sol
• Provider: OpenAI
• Public pricing estimate: $2.777537

📊 Context and tokens usage:

• 71.1K / 200K (36%) input tokens, 9.2K / 128K (7%) output tokens

Total: (71.1K + 1.7M cached) input tokens, 9.2K output tokens, $2.777537 cost

🤖 Models used:

• Tool: OpenAI Codex
• Requested: gpt-5.6-sol
• Thinking level: low (~7999 tokens)
• Model: GPT-5.6 Sol (gpt-5.6-sol)

📎 Log file uploaded as Gist (1057KB)

• View complete solution draft log

---

Now working session is ended, feel free to review and add any feedback on the solution draft.

[konard]

🎉 Auto-merged

This pull request has been automatically merged by hive-mind.

• All CI checks have passed

---

Auto-merged by hive-mind with --auto-merge flag