chore(RAN-54): flip 5 SUGGESTED criteria from `?` to `Met` with evide… #11

Job	Run time
Semgrep (SAST)	27s
jscpd (duplication < 3% on touched code)	12s
Gitleaks (secret scan)	5s
SBOM (SPDX + CycloneDX)	8s
PSScriptAnalyzer (Error severity gate)	29s
Trivy (filesystem + container scan)	8s
	1m 29s

Provide feedback