feat(ingest): add STORE_MIN_SEVERITY second-tier severity gate (#77) #121

Job	Run time
Trivy (filesystem + container scan)	10s
SBOM (SPDX + CycloneDX)	20s
Gitleaks (secret scan)	10s
Semgrep (SAST)	24s
OSV-Scanner (SCA)	8s
jscpd (duplication < 3% on touched code)	20s
	1m 32s

Provide feedback