Add SECURITY.md - security audit found no issues

[Copilot]

Comprehensive security audit of repository for exposed secrets, personal information, and security vulnerabilities.

Audit Results

Status: ✅ PASSED - Zero issues found.

What Was Audited

• Secrets: Configuration files, source code, git history
• Personal data: Commit emails, code comments, examples
• Security patterns: SSL validation, secret masking, error handling
• Code quality: Exception handling, profanity, test credentials

Key Validations

Secrets properly masked in output:

// ConfigCommands.cs
changes.Add("TokenSecret: ****");  // Never logs actual value

Debug logging safe:

// Program.cs - Only logs boolean flags
Console.WriteLine($"Proxmox configured: {configured} (TokenSecret={hasTokenSecret})");
// Logs "true/false", not actual secret

SSL bypass properly warned:

_logger?.LogWarning("SSL certificate validation is disabled for Proxmox API");

Changes

• Added SECURITY.md with vulnerability reporting process and security best practices
• Documents supported versions, reporting timeline, secure configuration guidelines

Assessment

Repository demonstrates excellent security hygiene:

• All sensitive fields in configs are empty/default
• .gitignore properly excludes secrets (.env, secrets.json, appsettings..Local.json)
• All commits use GitHub noreply emails
• Professional codebase with proper exception handling
• Only 2 legitimate TODO comments for future features

No code changes required.

Original prompt

Review this repo for anything embarassing such as secrets or personal info in the code, or really bad practices

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.