feat: add SecOps agent with security operations tooling

[chenchunrun]

Implement a comprehensive security operations (SecOps) agent framework with the following components:

Security Core:

• RBAC capability manager with role-based access control (viewer/operator/admin/analyst/responder roles)
• Risk assessment engine for command and tool call evaluation (scoring, classification, and action recommendations)
• Sandbox executor with resource limits, filesystem isolation, and timeout enforcement

Audit System:

• Tamper-evident audit logger with HMAC chain verification
• SIEM export integrations (Syslog, Splunk HEC, Elasticsearch)
• JSON file export for offline analysis

SecOps Tools (6 new agent tools):

• log_analyze: Log search and analysis with regex, time-range, severity filtering, and aggregation
• compliance_check: Automated compliance checking against CIS Linux/Docker, PCI-DSS, SOC2, HIPAA, ISO27001
• security_scan: Vulnerability scanning via Trivy, Grype, Lynis, chkrootkit, rkhunter, and source code secret detection
• monitoring_query: System metrics, disk usage, process analysis, Docker stats, and Prometheus/node-exporter queries
• network_diagnostics: Network diagnostics including ping, traceroute, DNS, port checks, connections, routing, bandwidth
• certificate_audit: TLS/SSL certificate inspection, expiry checking, chain verification, directory scanning, remote host checks

Integration:

• SecOps tools registered in coordinator build pipeline
• New "secops" agent type in config with appropriate tool filtering
• System prompt templates for ops and security expert personas

https://claude.ai/code/session_01GCTv3f1MDMZpsdCv6idM37

• I have read CONTRIBUTING.md.
• I have created a discussion that was approved by a maintainer (for new features).

[charmcli]

Thank you for your submission. We really appreciate it! Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request comment same as the below format.

---

I have read the Contributor License Agreement (CLA) and hereby sign the CLA.

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}