Refresh security review scope and conditions

[shinpr]

Summary

• semi-annual security review of the detection patterns: drop stale entries, narrow over-broad ones, and cover SSRF, object-level authorization, and dependency and pipeline integrity
• gate the advisory step on the changed component and add publisher verification for components new to the project
• fix the pattern section name the reviewer referenced but the reference file no longer defined
• bump the patch version to 1.5.3

Validation

• git diff --check

🤖 Generated with Claude Code