security plugin v3.2.0

Adds baseline/profile workflow, focused remediation, shared triage criteria, deterministic PreToolUse guard hooks, safer setup guidance, and scanner workflow fixes.