Security audit — full system review

[jbold]

Summary

Run comprehensive security audit of Kit's deployment.

Tasks

• Review OpenClaw config for exposed secrets/ports
• Audit firewall rules (SSH, gateway port, SurrealDB)
• Check for outdated packages/CVEs
• Review file permissions on sensitive files
• Verify LUKS encryption status
• Run gitleaks on all repos
• Review container security (rootless podman, image provenance)
• Document findings and remediation plan