refactor: 7-tool MCP triage surface + SQLite survival tuning #140

Job	Run time
Gitleaks (secret scan)	8s
Semgrep (SAST)	24s
OSV-Scanner (SCA)	7s
jscpd (duplication < 3% on touched code)	17s
SBOM (SPDX + CycloneDX)	20s
Trivy (filesystem + container scan)	15s
	1m 31s

Provide feedback