Web App Security Checklist

Step-executable security checklist for web application features — consolidates nfr-platform-matrix security constraints into phase-organized checkable items