refactor: 7-tool MCP triage surface + SQLite survival tuning (#91) #145

Job	Run time
SBOM (SPDX + CycloneDX)	19s
Trivy (filesystem + container scan)	12s
OSV-Scanner (SCA)	5s
Gitleaks (secret scan)	7s
Semgrep (SAST)	23s
jscpd (duplication < 3% on touched code)	15s
	1m 21s

Provide feedback