Moving Container Security Upstream: Fix CVEs Locally and Early

Local CVE remediation with Claude Code — scan, fix, and verify before build and before push, with whichever scanner you already have…