AngusSecurity offline engine bundle and doctor acceptance: intranet deployment checklist

AngusSecurity offline intranet deployment: prepare-linux-offline-bundle, import-offline-bundle, update-trivy-db, and doctor PASS checklist. Complete OpenGrep/Gitleaks/Trivy real-engine acceptance on hosts without internet—no stub in production.