chore: gate check (authorized security test)

[Cryptojourney]

Authorized HackerOne research: checking whether fork-PR CI requires maintainer approval. Benign, no payload. — Cryptojourney

---

Note

Low Risk
Documentation-only addition with no runtime, CI, or security logic changes.

Overview
Adds a new GATECHECK.md file with a single line documenting authorized, benign security research aimed at verifying whether fork-PR CI requires maintainer approval.

There are no application, workflow, or dependency changes—only this marker file for the HackerOne gate-check described in the PR.

^{Reviewed by Cursor Bugbot for commit 555a3eb. Bugbot is set up for automated code reviews on this repo. Configure here.}