chore(security): block merge on high-severity scanner findings

[abir-vim]

Automated fleet sync of the org security scanner. Raises BLOCK_ON_SEVERITY from critical to high so high and critical findings (and dependency BLOCK) fail the AI security scan check. Medium/low/info remain advisory. See scanner-org for the source template.

[cloudflare-workers-and-pages]

Deploying theme-editor-deploy with    Cloudflare Pages

Latest commit:	910b04d
Status:	✅  Deploy successful!
Preview URL:	https://bbf2d4ba.theme-editor-deploy.pages.dev
Branch Preview URL:	https://chore-scanner-block-on-high.theme-editor-deploy.pages.dev

View logs

[github-actions]

Security Scanner Results

Critical	High	Medium	Low	Info	Dep BLOCK	Dep WARN
0	0	0	0	1	0	0

Findings

• ⚪ Security gate block threshold lowered from 'critical' to 'high' — .github/workflows/security.yml:417
  • Remediation: No fix required — this is an intentional hardening of the security gate. Ensure the team is aware that high-severity findings will now block merges, and that any legitimate high findings are triaged/resolved rather than the threshold being reverted.

Gate blocks at severity high or a dependency marked BLOCK. Full history in scanner-stats.