Give your agent the Watch vendor security advisories claw

Watches public security advisories from your critical vendors and pages on the ones that touch your surface area. Runs every 4 hours across vendor advisory pages, the NIST NVD public feed, and GitHub Security Advisories, maps each advisory to your footprint of versions, regions, and configurations, and surfaces the recommended remediation with the vendor's effective deadline. Advisories outside your surface are filed quietly. Quiet runs save state and send nothing.