master
feat(security): encrypt found secrets + backup at rest (P0-5)
fix: nuclei OOM — severity filter + host swap setup