Per Jeppe 2026-08-16 19:52 UTC: external pen test engagement is cancelled. Removes: - documentation/security/pen-test-plan.md (the planning document, TRU-80 cancelled) KEEPS: - .github/workflows/code_quality.yml (Qodana Cloud scan, still active) - QODANA_TOKEN secret (Qodana project key)