test: update security integration mock for _orchestrator_done event

fix: ruff lint — import sorting, unused imports, line length, naming

fix(security): buffer stream for output validation, store filtered answer

fix(security): output validation on /ask/stream, correct audit endpoint

fix(security): add security to /ask/stream, wire PII redactor into SearchTool

feat(security): wire injection detection, output validation, audit into pipeline