fix: licensing playbook sync, disclosure playbook, devcontainer checks, prompt fixture factory

[c4182657-ship-it]

Closes #791
Closes #792
Closes #793
Closes #795

Summary

Delivers the licensing policy sync, vulnerability disclosure playbook, devcontainer reproducibility checks, and prompt fixture factory on one branch.

What changed

• Add a dependency licensing policy playbook #791: synced deny.toml with license-policy.json; added src/test/license-policy.test.ts.
• Add a vulnerability disclosure playbook #792: added docs/security/vulnerability-disclosure.md, linked from SECURITY.md; added disclosure test.
• Add a reproducible local environment via devcontainer #793: added src/test/devcontainer.test.ts; fixed docs/contributing.md setup-node version.
• Add a factory for prompt fixture records #795: extended makePrompt with sequential ids plus makePromptList/resetPromptSequence; added factory test.

Validation

• yarn test:frontend on the 4 new test files: 13 passed.
• No existing behavior changed; pre-existing marketplace/dashboard; failures unchanged.

[drips-wave]

@c4182657-ship-it Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[barry01-hash]

Perfect contribution