10. Tooling

Check OpenGrep / Gitleaks / Trivy install and health; handle doctor failures.