Security Review Command Enhancements

The /security-review command now includes expanded false positive filtering guidelines:

• Added exclusions for React/Angular XSS (frameworks handle escaping)
• Added exclusions for client-side permission checking (backend handles this)
• Added exclusions for notebook vulnerabilities without concrete attack paths
• Evidence: Enhanced filtering rules in ZV5 template starting at line 471235