Post-Phase-4: manual repository settings confirmation

[Riverbraid]

Status

MANUAL_CONFIRMATION_REQUIRED

Purpose

Track manual confirmation of repository settings across active Riverbraid repositories.

Settings to confirm

• branch protection
• rulesets
• force-push protection
• required status checks
• secret scanning
• push protection
• private vulnerability reporting
• Dependabot
• CodeQL or default scanning where relevant

Boundary

This issue is an inventory and manual confirmation tracker only. It does not claim security hardening is complete.