ci: skip security-audit tests in CI

The audit script checks live system state (running services, firewall
rules, /proc mounts) that does not exist in a CI runner. Run locally.

Author: benvinegar

.github/workflows/ci.yml

@@ -34,8 +34,9 @@ jobs:
       - name: Test — log redaction (11 tests)
         run: cd bin && bash redact-logs.test.sh
 
-      - name: Test — security audit (21 tests)
-        run: cd bin && bash security-audit.test.sh
+      # security-audit.sh checks live system state (running services, firewall,
+      # /proc mounts) that doesn't exist in CI. Run it locally instead:
+      #   cd bin && bash security-audit.test.sh
 
   secret-scan:
     runs-on: ubuntu-latest