Update ci-cd.md: the scheduled vuln scan is green now that #8 cleared the advisories (red = a new one); note the NU1901-1903 demotion is kept by design (criticals still block; lower severities surface via the scan + Renovate). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>