Security practices

We follow a secure-by-default approach. Explore the security canon.

• docs/en/security/security-by-design.md
• docs/en/policies/incident-response.md