ratomirjovanovic / pandaward Local, evidence-based application security assessment engine and Claude Code plugin