Module security 

--security-only planner: phase-B OSV re-verification, recommended_fix() targeting, the native-form yank filter, and the three-outcome classification (#1120, spec 068 FR-008 through FR-015).

Functions

plan_security_updates

Plans the --security-only update set.