2.0.1

docs(sandbox): rewrite bilingual README for v3 guard; set configCode Security

• readme_vi.md / readme.md: 247-doc bilingual docs describing the v3
  two-layer guard (DB write choke point + LFM route-name block), the
  .env switch, infra allowlist, and conditions/Q&A. Replaces the stale
  v1 method-based description.
• gp247.json: group under configCode "Security"; bump version 2.0.1.

Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com