[nfebe]

Add draft security profiles to runtime templates. Collection requires an administrator-approved immutable image and owner approval.

[sourceant]

Code Review Summary

Adds draft security_profile blocks to seven existing runtime templates (astro, laravel, nextcloud, nextjs, node, php, wordpress) and to newly added Go and Python templates, each paired with a docker-compose file. Every profile targets a source root, schedules incremental, retrospective and full runtime-files integrity reviews plus a collector invocation, and sets time and size budgets with an empty access policy. The Go profile alone raises the per-file limit to 64 MiB.

🚀 Key Improvements

• All listed runtime templates now ship a uniform integrity review profile with cron schedules and budgets.
• New Go and Python templates provide docker-compose services exposing ports 8080 and 8000.

💡 Minor Suggestions

• Review coverage is incomplete. Inspect the execution details before approving.

[sourceant]

Review complete. See the overview comment for a summary.