Add draft skeletons for various documentation topics

- Created draft documentation for enabling reachability, CLI authentication, EntryTrace heuristics, Go stripped binaries, Java and Python lockfiles, Rust fingerprint enrichment, SAST integration, Windows/macOS analyzer coverage, scanner engine surface, multi-tenancy operations, RLS and data isolation, ABAC overlays, VEX trust model, VEX ops runbook, VEX mapping, scopes and roles, tenancy overview, VEX signatures, contract testing, VEX consensus algorithm, VEX consensus API, VEX consensus console, VEX consensus overview, and VEX issuer directory.
- Each document includes a status placeholder, purpose, and open TODOs for future updates.

docs/security/scopes-and-roles.md

@@ -0,0 +1,17 @@
+# Scopes and Roles — Draft Skeleton (2025-12-05 UTC)
+
+Status: draft placeholder. Inputs pending: DVDO0110 scope grammar.
+
+## Scope Grammar
+- Syntax overview; examples (tenant/org/project/workspace).
+
+## Roles & Permissions
+- Core roles (admin, auditor, operator, viewer) — to confirm.
+- Mapping to scopes and imposed rule reminder.
+
+## Token / Session Handling
+- How scopes flow through tokens and sessions.
+
+## Open TODOs
+- Fill role matrix when DVDO0110 lands.
+- Add ABAC overlay pointers once defined.