docker-security

@dandudzi

Container image hardening: non-root users, distroless images, vulnerability scanning (Trivy, Grype, Docker Scout), image signing with Cosign, SBOM generation, runtime security (Falco, Seccomp, AppArmor), and registry access control.