Add GitHub Advanced Security (GHAS)

[cak]

Add a chapter on GitHub Advanced Security (GHAS). Include overviews of CodeQL/code scanning, secret scanning, dependency review, and custom auto-triage rules. Emphasize automation and practical use in securing repositories.