feat(lab10): defectdojo governance report + capstone walkthrough

[wannebetheshy]

Summary

• DefectDojo v3.1.0 running locally via Docker Compose (release mode)
• 7 scan types imported from Labs 4-9: Grype, Trivy SCA, Semgrep, ZAP, Checkov, KICS, Trivy Image — 391 total findings
• Cross-tool dedup example: CVE-2023-46233 (crypto-js 3.3.0) found in both Trivy SCA (lab4) and Trivy Image (lab7)
• Governance report with SLA matrix (24h/7d/30d/90d), 17 Critical / 163 High / 170 Medium findings, SAMM next-quarter goal
• Bonus: 5-minute interview walkthrough script

PR checklist

• Task 1 — DefectDojo setup + 7 imports + dedup proof + counts table
• Task 2 — Governance report with MTTD/MTTR/SLA/backlog + next-quarter SAMM goal
• Bonus — 5-minute walkthrough script (submissions/lab10-walkthrough.md)