SEC-DOC-001B: correct Functions production audit count

[daliu]

Outcome

Corrects one stale security-ledger phrase: the Functions production dependency tree has 8 affected packages; the full tree has 9 because one finding is development-only.

Closes #243

Exact scope

• One SECURITY.md phrase changes from 9 to 8 Functions production findings.
• The 6-root count, remaining risk wording, historical evidence, packages, lockfiles, source, tests, Rules, workflows, providers, and deployment remain unchanged.
• The remaining findings are explicitly not accepted as safe.

Verification

• Node 20.20.2 root production audit: 6 affected packages — 3 high, 2 moderate, 1 low, 0 critical.
• Node 20.20.2 Functions production audit: 8 moderate affected packages, 0 high or critical.
• Node 20.20.2 Functions full-tree audit: 9 moderate affected packages, 0 high or critical.
• Exact diff: one insertion and one deletion in one SECURITY.md row.
• git diff --check, secret-pattern check, and exact-scope check: passed.
• Two independent exact-hash reviews approved 49bb441ac8373fc46e7aeed6a7d28f0f14d59a9a with no findings.
• Hosted CI run 29313098778: all five required jobs passed.

Officer impact: None — this corrects one engineering risk-ledger sentence. It changes no page, officer task, permission, data, or payment behavior.

Officer documentation: None — no current officer procedure or diagram changes.

Deployment evidence: Website not published or verified; Firebase not deployed; providers unchanged; production data untouched; live behavior unchanged. Documentation source, tests, merge, deployment, and live state remain separate.

[netlify]

✅ Deploy Preview for luminous-fox-7c393f ready!

Name	Link
🔨 Latest commit	49bb441
🔍 Latest deploy log	https://app.netlify.com/projects/luminous-fox-7c393f/deploys/6a55de703e90380008fedd00
😎 Deploy Preview	https://deploy-preview-244--luminous-fox-7c393f.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[daliu]

Post-merge evidence: main 378f012f007698094916b8c01bf4c18dbccf8085; CI 29313299150 passed all five required jobs; zero GitHub deployment records for the merge SHA. No website, Firebase, provider, production-data, or live-behavior action occurred. #243 claim released.