Create GitHub Copilot agent skills for static analysis & vulnerability management

These skills will empowers the coding agent to perform deep static analysis tailored to infrastructure-as-code (IaC) and automation scripts managing ArcGIS Enterprise deployments (such as Chef cookbooks, Terraform modules, and Python management scripts).

## Static Infrastructure Audit (arcgis-infra-audit)

This skill evaluates your Infrastructure-as-Code (Terraform modules, CloudFormation, Azure Bicep) against the AWS and Azure Well-Architected Frameworks, ensuring that the underlying cloud infrastructure supporting ArcGIS Enterprise is resilient, performant, and cost-effective.

## Static Vulnerability Audit (arcgis-secure-audit)

This skill acts as your specialized security gatekeeper, combining general software supply chain security with domain-specific hardening rules for Esri software stacks.

- CVE & Dependency Scanning: scans the deployment automation infrastructure against known CVE databases.
- Secrets & Credential Detection: prevents accidental hardcoding of administrator passwords, database connection strings, and SSL certificates.
- ArcGIS Security Best Practices: validate the IaC against the ArcGIS implementation guidance for authentication, authorization, encryption, and auditing.

The issue names no files, tests, or existing skill entry points. Start by locating where GitHub Copilot agent skills belong, then define completion against the listed IaC audits, CVE and dependency scanning, secret detection, and ArcGIS security checks.

Written by the indexing model from the issue text.