Defensive security guidance for code — input validation, secrets handling, auth, common vulnerability classes (OWASP Top 10).
