Security Guide

Canonical source: ai/SECURITY_GUIDE.md

Raw (for direct agent fetching): https://raw.githubusercontent.com/duckframework/duck/main/ai/SECURITY_GUIDE.md