[IC-093] Automate TLS, security-header, cookie, CORS, and public-endpoint deployment checks.

[github-actions]

Outcome

Automate TLS, security-header, cookie, CORS, and public-endpoint deployment checks.

Acceptance checks

• Checks run against a deployed environment; unsafe configuration blocks promotion; approved origins are environment scoped.

Dependencies

IC-080

Planning metadata

• Priority: P1
• Milestone: Milestone 9 — Operations and pilot readiness

Definition of done

• Automated tests cover the change where practical.
• Tenant/environment isolation and failure paths were reviewed.
• Logs and errors contain no secrets, PII, documents, or biometric data.
• Relevant API, architecture, operations, and user documentation is updated.
• The pull request links this issue and lists verification commands.
  Generated from docs/planning/implementation-backlog.md; edit the backlog and rerun the sync to change generated fields.