feat: add comprehensive security audit command

New `rma security` command (alias: `rma audit`) that provides:

- Multi-language dependency vulnerability scanning:
  - Rust (Cargo.lock via RustSec)
  - npm (package-lock.json, yarn.lock via OSV)
  - Python (requirements.txt, poetry.lock via OSV)
  - Go (go.mod, go.sum via OSV)
  - Java (pom.xml, build.gradle via OSV)

- Docker security scanning:
  - Dockerfile security checks (USER, latest tag, secrets, etc.)
  - docker-compose.yml misconfigurations
  - Privileged mode, host network, sensitive mounts

- Code security analysis:
  - Hardcoded secrets
  - Injection vulnerabilities
  - Unsafe patterns

Output shows CVE → Fix mappings with:
- Advisory IDs (RUSTSEC, GHSA, CVE)
- Affected package and version
- Fixed versions when available
- Recommended fix commands

Supports multiple output formats:
- pretty (default): colored terminal output
- json: machine-readable JSON
- sarif: for CI/CD integration
- markdown: for reports

Usage:
  rma security .              # Scan current directory
  rma security --fix          # Show fix commands
  rma security --format json  # JSON output
  rma audit --skip-docker     # Skip Docker scanning

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Author: bumahkib7

Cargo.lock

@@ -42,6 +42,7 @@ sha2 = "0.10"
 crossterm = "0.28"
 futures = "0.3"
 walkdir = "2"
+regex = "1"
 
 [dev-dependencies]
 tempfile.workspace = true

crates/cli/Cargo.toml

@@ -10,6 +10,7 @@ pub mod init;
 pub mod plugin;
 pub mod scan;
 pub mod search;
+pub mod security;
 pub mod stats;
 pub mod suppress;
 pub mod watch;