feat(serving): config validation, integration coverage, docs refresh … #81

Job	Run time
Gitleaks (secret scan)	13s
Trivy (filesystem + container scan)	31s
OSV-Scanner (SCA)	7s
SBOM (SPDX + CycloneDX)	13s
jscpd (duplication < 3% on touched code)	17s
Semgrep (SAST)	27s
	1m 48s

Provide feedback