Add canonical operations/security/access/feature docs and fix path integrity to improve onboarding and incident readiness.