build: add missing security/lint targets

ober

f85aa475e7e159caaa2190a966d4b24baa12cd7d

diff --git a/Makefile b/Makefile
index a3cb0f5..5eba872 100644
--- a/Makefile
+++ b/Makefile
@@ -22,13 +22,21 @@ LIBDIRS := $(ROOT)/lib:$(HOME)/mine/jerboa-sqlite/src:$(HOME)/mine/jerboa-websea
 RUNTIME_ENV := JERBOA_HOME="$(JERBOA_RUNTIME_HOME)" DYLD_FALLBACK_LIBRARY_PATH="$(JERBOA_NATIVE_DIR)" LD_LIBRARY_PATH="$(JERBOA_NATIVE_DIR):$$LD_LIBRARY_PATH" JERBOA_SEARCH_QIX_LIB="$(QIX_NATIVE_DIR)" JERBOA_SEARCH_QIX_DEV_NATIVE=1
 JEXEC := $(RUNTIME_ENV) "$(JERBUILD)" exec --libdirs "$(LIBDIRS)"
 
-.PHONY: all deps build check test native-test integration bench core-query-bench query-terms-bench link-replacement-bench frontier-enqueue-bench restart-bench segment-bench mmap-bench mmap-capacity-bench ranking-bench status-bench concurrency-bench hydration-bench search-page-bench document-frequency-bench ingest-transaction-bench memory-scaling-bench run clean lint
+.PHONY: all deps build check test native-test integration bench core-query-bench query-terms-bench link-replacement-bench frontier-enqueue-bench restart-bench segment-bench mmap-bench mmap-capacity-bench ranking-bench status-bench concurrency-bench hydration-bench search-page-bench document-frequency-bench ingest-transaction-bench memory-scaling-bench run clean lint security
 .DEFAULT_GOAL := check
 
 all: check
 
 lint: check
 
+security:
+	@echo "==> security: high-confidence secret scan"
+	@if git grep -nIE '(AKIA[0-9A-Z]{16}|-----BEGIN (RSA |EC |OPENSSH )?PRIVATE KEY-----|aws_secret_access_key|GH_TOKEN|sk-[A-Za-z0-9]{20,})' -- ':!vendor' ':!*.lock' ':!test*' ':!Makefile' 2>/dev/null; then \
+		echo "SECURITY: potential secret detected" >&2; exit 1; \
+	else \
+		echo "security: no high-confidence secrets found"; \
+	fi
+
 SINATRA_SOURCES := $(SINATRA_DIR)/sinatra.ss $(wildcard $(SINATRA_DIR)/sinatra/*.ss)
 
 deps: $(SINATRA_LIB)/sinatra.sls