[L4] CyberSec + SDLC compliance (first-early-adopter)

[kabehz]

Early Adopter Stage 4 (L4)

Parent roadmap issue: #1

Focus

• CyberSec + SDLC compliance

Source and Scope

• Canonical source: atl0s-sdk + atlantyde-sdlc-kit
• Lab scope: LAB-091..LAB-113 + LAB-SDLC-*
• Governance profile: strict-private
• Promotion target: atlantyqa-labs/security-governance

Acceptance Checklist

• Deliverables completed for this stage scope.
• Evidence attached in outputs/.
• PR opened with early-adopter and stage labels.
• CODEOWNERS approval obtained.
• Ledger updated in metrics/users/<user>.json.

Gamification Hooks

• Labels on this issue drive Project v2 field mapping (Level/XP).
• PR labels must trigger regulatory XP and badge workflows when applicable.
• Graduation objective remains atlantyqa-mind-gitops.