How to roll out a supply-chain gate: SBOM, then VEX, then refuse download

Thousands of findings nobody reads, or day-one blocking that paralyzes the company—roll out SBOM → VEX → observe → “refuse download on fail” on AngusRepo (repo.anguskit.com); align Repo enforcement with the AngusSecurity engine.