SecuScan

fix(validation): accept mixed port range specs

feat(security): add task start input limits

test(cache): cover cache invalidation + normalize digests

feat(validation): standardize plugin field metadata

feat(plugins): add metadata validator CLI