SF-002 — Lockout counter reset (moved)

This finding now lives at ../security/internal/findings.md (SR-015, legacy SF-002).

The security-findings/ folder kept its file at this path so external bookmarks resolve. The canonical body — file paths, line numbers, repro steps, and remediation — is in the consolidated internal register.

→ ../security/internal/findings.md — SR-015