feat: add repo-level .docksec.yml configuration file

[advaitpatel]

Summary

Adds a committed .docksec.yml so a team's scan policy lives in the repository
instead of in per-developer flags and environment variables.

Settings covered: severity, fail_on, formats, output_dir, provider,
model, offline, skip_ai_scoring, no_redact, no_cache, ignore_file,
baseline, and rules.disabled.

# yaml-language-server: $schema=https://owasp.org/DockSec/docksec-config-schema.json
severity: CRITICAL,HIGH
fail_on: HIGH
formats: [json, html]
output_dir: ./security-reports

rules:
  disabled:
    - compose-missing-healthcheck

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None