security: remediate 5 external pentest findings (Strix.ai) #80

Job	Run time
Post-Quantum PQ (Ubuntu)	1m 48s
UBSan (Ubuntu)	2m 39s
Server Codecs (Ubuntu)	1m 40s
Build & Test (macos-14)	2m 10s
Full Suite 394/394 (Ubuntu)	1m 36s
Secrets Scan (gitleaks)	5s
License Compliance	1m 44s
Benchmark Registry	4s
Mutation Testing Baseline (Ubuntu)	1m 46s
Build & Test (Windows / MSVC)	5m 4s
Build & Test (ubuntu-24.04)	3m 30s
Python SAST (bandit)	10s
Fuzz (Ubuntu, Clang-18)	30m 55s
TSan (Ubuntu)	1m 19s
ASan + UBSan (Ubuntu)	1m 39s
Coverage (Ubuntu, Clang-18)	2m 0s
Benchmarks (Ubuntu)	2m 29s
	1h 0m 38s

Provide feedback