docs+chore: add README Security section; fix lint regressions on main

- README: add a visible ## Security section (official sources, vuln reporting via SECURITY.md, GateGuard/IOC/AgentShield guardrails, security guide); make stats line a plain paragraph to clear MD028
- eslint: empty catch comment in run-with-flags.js; drop unneeded escape in github-coordination/parsing.js; remove unused execFileSync import in its test (#2236 follow-ups)
- markdownlint: wrap bare URLs in rules/vue/*.md (#2250 follow-up)

npm run lint green; full suite 2836/2836.

rules/vue/coding-style.md

@@ -51,4 +51,4 @@ const open = defineModel<boolean>('open', { default: false })
 ## Reference
 
 - ECC skills: `frontend-patterns`, `vite-patterns`.
-- Docs: https://vuejs.org/api/sfc-script-setup.html · https://vuejs.org/guide/essentials/reactivity-fundamentals.html · https://eslint.vuejs.org/
+- Docs: <https://vuejs.org/api/sfc-script-setup.html> · <https://vuejs.org/guide/essentials/reactivity-fundamentals.html> · <https://eslint.vuejs.org/>

rules/vue/hooks.md

@@ -42,4 +42,4 @@ vue-tsc --noEmit
 ## Reference
 
 - ECC skills: `frontend-patterns`, `vite-patterns`.
-- Docs: https://github.com/vuejs/language-tools (vue-tsc) · https://eslint.vuejs.org/ · https://github.com/feature-sliced/steiger
+- Docs: <https://github.com/vuejs/language-tools> (vue-tsc) · <https://eslint.vuejs.org/> · <https://github.com/feature-sliced/steiger>

rules/vue/patterns.md

@@ -53,4 +53,4 @@ queryClient.invalidateQueries({ queryKey: ['auction', id] })
 ## Reference
 
 - ECC skills: `frontend-patterns`, `vite-patterns`.
-- Docs: https://pinia.vuejs.org/ · https://router.vuejs.org/ · https://tanstack.com/query/latest/docs/framework/vue/overview · https://vuejs.org/guide/reusability/composables.html
+- Docs: <https://pinia.vuejs.org/> · <https://router.vuejs.org/> · <https://tanstack.com/query/latest/docs/framework/vue/overview> · <https://vuejs.org/guide/reusability/composables.html>

rules/vue/security.md

@@ -43,4 +43,4 @@ paths:
 ## Reference
 
 - ECC skills: `frontend-patterns`, `vite-patterns`.
-- Docs: https://vuejs.org/guide/best-practices/security.html · https://github.com/cure53/DOMPurify · https://github.com/braintree/sanitize-url
+- Docs: <https://vuejs.org/guide/best-practices/security.html> · <https://github.com/cure53/DOMPurify> · <https://github.com/braintree/sanitize-url>

rules/vue/testing.md

@@ -50,4 +50,4 @@ expect(wrapper.emitted('bid')).toBeTruthy()
 ## Reference
 
 - ECC skills: `frontend-patterns`, `vite-patterns`.
-- Docs: https://test-utils.vuejs.org/api/ · https://pinia.vuejs.org/cookbook/testing.html · https://vitest.dev/
+- Docs: <https://test-utils.vuejs.org/api/> · <https://pinia.vuejs.org/cookbook/testing.html> · <https://vitest.dev/>