Resolved merge conflict by accepting all local changes #16

	name: Security

	# lint/format/type/test gates live in ci.yml (blocking). This workflow
	# is dedicated to security scanning so the two do not duplicate work.

	on:
	push:
	branches: [main, develop]
	pull_request:
	branches: [main, develop]

	jobs:
	security:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	cache: "pip"

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"
	pip install pip-audit

	# dependency vulnerability scan.
	- name: Audit dependencies (pip-audit)
	run: pip-audit --strict --desc

	# Bandit static security analysis (blocking at medium+ severity/confidence).
	- name: Static security analysis (bandit)
	run: bandit -r djpaystack -ll -ii --severity-level medium

Provide feedback