fix: enhance secure command with remediation roadmap and CAF traceability

[tractorjuice]

Summary

• Autoresearch-optimised the /arckit:secure command prompt over 4 iterations, improving output quality from 8.0 → 9.6 (20% improvement)
• Added three new analytical sections: Security Remediation Roadmap, CAF Maturity Summary, and Principles-to-CAF Traceability Matrix

Changes

Change	Before	After
Recommendations	Prioritised lists (Critical/High/Medium)	+ 25-33 item Security Remediation Roadmap with GDS phase, named owners, CAF principles, effort days, £ cost
CAF scoring	Binary pass/fail per principle	+ CAF Maturity Summary with % per objective (e.g., A=37.5%, B=25%, C=0%, D=0%)
Traceability	CAF principles reference artifacts	+ Principles-to-CAF Traceability Matrix mapping P-001–P-006 to CAF with gap analysis for unsupported principles

Autoresearch Results

iter 0: 8.0 baseline                                              KEEP
iter 1: 9.2 Remediation Roadmap + CAF Maturity Summary            KEEP
iter 2: 9.6 Principles-to-CAF Traceability Matrix + gap analysis  KEEP
iter 3: 9.8 Investment Summary (delta 0.2)                        DISCARD

3 keeps, 1 discard across 4 iterations. Converter run included — all 7 distribution formats updated.

Test plan

• Run /arckit:secure 001 in a test repo with STKE and PRIN artifacts
• Verify CAF Maturity Summary has percentages per objective
• Verify Security Remediation Roadmap has GDS phase, named owners, CAF principles, effort, cost
• Verify Principles-to-CAF Traceability Matrix present with gap analysis

🤖 Generated with Claude Code

[tractorjuice]

Superseded by #265 (combined autoresearch PR for all 48 commands)