Assess platform security configuration including SCC/PSA enforcement, etcd encryption, and TLS profiles.