security-review

Comprehensive security review checklist for auth, OAuth, admin, and multi-tenant code changes