Creates or updates SECURITY.md and authorization scope for a repo in the Defense Factory prepare phase. Use when starting a defensive assessment, before inventory or scans, or when SLA/ownership rules are missing.