Add test coverage for security utilities and CSR generation

[shadowbipnode]

Add targeted tests for secret detection, scanner sanitization, exposure scoring, Docker/nginx/permission audits, license validation, and CSR generation.