Build - docs(security): document build hardening, amalgamation pinning, and CI analysis SECURITY.md understated the native security posture: it claimed only "official SQLite amalgamation with recommended security flags" and "analyzed with clang-tidy and ASAN". It now documents what we actually ship -- the per-platform OpenSSF hardening table, SHA3-256 verification of the vendored amalgamation, and the full detector set (ASan/LSan/UBSan, Valgrind, and clang-tidy gating on ownership/lifetime checks). Als...

Build - docs(security): document build hardening, amalgamation pinning, and CI analysis SECURITY.md understated the native security posture: it claimed only "official SQLite amalgamation with recommended security flags" and "analyzed with clang-tidy and ASAN". It now documents what we actually ship -- the per-platform OpenSSF hardening table, SHA3-256 verification of the vendored amalgamation, and the full detector set (ASan/LSan/UBSan, Valgrind, and clang-tidy gating on ownership/lifetime checks). Als... #315