Fix scan route: register in security-risk.routes.ts (active route file)

The scan route was added to security.routes.ts which isn't loaded by the
app router. The app loads security-risk.routes.ts at /security/*. Added
the scan route to security-risk.routes.ts so /security/scan resolves.

Verified: Scan Image page loads at /security/scan with heading, image
input, and submit button. 111/111 canonical routes passing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/Web/StellaOps.Web/output/playwright/live-frontdoor-auth-state.json

@@ -6,7 +6,7 @@
       "localStorage": [
         {
           "name": "stellaops.sidebar.preferences",
-          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[],\"collapsedSections\":[]}"
+          "value": "{\"sidebarCollapsed\":false,\"collapsedGroups\":[\"audit-evidence\",\"setup-admin\"],\"collapsedSections\":[]}"
         },
         {
           "name": "stellaops.theme",

src/Web/StellaOps.Web/src/app/routes/security-risk.routes.ts

@@ -110,6 +110,15 @@ export const SECURITY_RISK_ROUTES: Routes = [
         (m) => m.SecurityDispositionPageComponent
       ),
   },
+  {
+    path: 'scan',
+    title: 'Scan Image',
+    data: { breadcrumb: 'Scan Image' },
+    loadComponent: () =>
+      import('../features/scanner/scan-submit.component').then(
+        (m) => m.ScanSubmitComponent
+      ),
+  },
   {
     path: 'reports',
     title: 'Security Reports',