fix: upgrade security workflow to Node.js v22

[arpayidcloud-byte]

Summary

Fix security scan workflow by upgrading Node.js version to v22.

Problem

Security scan workflow (PR #66) failed with:

Error [ERR_UNKNOWN_BUILTIN_MODULE]: No such built-in module: node:sqlite

Root Cause

• Security workflow used Node.js v20
• node:sqlite module only available in Node.js 22+
• Main CI workflow already uses Node.js v22 ✅

Solution

Upgrade security-scan.yml to use Node.js v22:

node-version: '22'  # Was: '20'

Compatibility

• ✅ package.json: "engines": {"node": ">=20.0.0"}
• ✅ Main CI: Already using Node.js v22
• ✅ GitHub Actions: Fully supports Node.js v22
• ✅ Codebase: No breaking changes

Impact

• Security scans will now pass
• OWASP Top 10 tests will run successfully
• Daily scheduled scans will work
• Aligned with main CI workflow

Related

• Fixes: PR feat(phase5-batch5.3): Security tests & scanning #66 (Phase 5.3 Security Tests)
• Aligns with: CI workflow (already on Node 22)
• Completes: Phase 5 Testing Suite

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.