Add Cloudflare's security-audit skill through dotagents #567

Cloudflare open-sourced the security audit skill behind their own vulnerability hunting harness: https://github.com/cloudflare/security-audit-skill (MIT).

It runs in six phases. It maps the codebase, hunts area by area, hands every finding to a fresh agent that didn't find it to confirm it's real, writes structured results, verifies each record again, and writes a report split into confirmed, needs validation, and rejected.

We already manage dotagents, code-review, and pr-writer this way, so this is a manifest change:

• Add a [[skills]] entry to agents.toml with name = "security-audit" and source = "cloudflare/security-audit-skill"
• Add cloudflare/security-audit-skill to [trust].github_repos
• Run pnpm dotagents install and confirm .agents/.gitignore picks it up as managed
• List it under "Managed by dotagents" in dotagents.md

Source: https://x.com/RoundtableSpace/status/2112125353594401162