Docs: Zero Trust "impossible vs tedious" design test in SECURITY.md

**Context:** ROADMAP.md → Zero Trust control review

---

## Doc area

Design / architecture (`docs/design/`)

## Describe the issue

Roadmap calls for a standing **design test** in `SECURITY.md`: prefer controls that **remove capability** over friction-only mitigations (rate limits, observe-only DNS). No documented criterion for prioritizing DNS enforcement, credential scoping, and containment vs throttling.

## Affected docs

- `docs/design/SECURITY.md` (primary)
- `docs/guides/DEVELOPER_GUIDE.md` (link from security section)
- ADR candidate if governance wants formal status

## Suggested change

1. Add section **"Impossible vs tedious"** with decision rubric and examples (DNS enforce mode, credential binding, circuit breaker vs turn caps only).
2. Checklist for PR reviewers on security-sensitive changes.
3. Cross-link behavioral circuit breaker and emergency containment drafts.
4. Run `mise //docs:sync` after edit.

## Other information

- Lightweight doc issue; no runtime code required.
- Aligns with ADR-009 security posture themes.

Inizia da docs/design/SECURITY.md e dalla revisione dei controlli Zero Trust in ROADMAP.md, poi esamina docs/guides/DEVELOPER_GUIDE.md per trovare il link alla sezione sulla sicurezza. Aggiungi la griglia «Impossibile vs. tedioso», la checklist per i reviewer, esempi e collegamenti incrociati alle bozze del circuit breaker comportamentale e del contenimento di emergenza; al termine esegui mise //docs:sync.

Scritto dal modello di indicizzazione a partire dal testo della issue.