audit/security.md

# Security Audit
- security_headers.py handles CORS and basic web security headers.
- security_config.py centralizes security parameters.
- Next step: YOLOv5/8 models might need sandboxing. Check input validation on ace_live_search.py.