Add config preset: strict enterprise mode

[a78c7]

Add a stricter config preset for teams that want warnings treated as blocking and tighter diff limits.

Scope:

• Include a sample config file.
• Document recommended rollout guidance.
• Add tests for strict behavior.

Safety boundary: this should not read secrets, upload code, or call external services.