fix: remediate 7 VlamGuard policy failures

[github-actions]

Summary

{"description": "This production deployment has critical security risks that require immediate attention: hardcoded secrets (database credentials and API keys) in environment variables, excessive Linux capabilities (SYS_ADMIN), and missing privilege escalation protections. Additionally, the LoadBalancer service exposes the backend externally without justification, increasing attack surface. These issues violate security best practices and could lead to privilege escalation, data breaches, or lateral movement in case of container compromise."}

VlamGuard Report

	Risk Score	Risk Level	Grade	Hard Blocks
Before	100/100	critical	F	3
After	100/100	critical	F	3

Fixes Applied

Check ID	File	Description
excessive_capabilities	demo/charts/security-scan-showcase/values.yaml	Applied static remediation: capabilities
service_account_token	demo/charts/security-scan-showcase/values.yaml	Applied static remediation: automountServiceAccountToken
allow_privilege_escalation	demo/charts/security-scan-showcase/values.yaml	Applied static remediation: allowPrivilegeEscalation

Unfixed (Manual Action Required)

• exposed_services
• pod_security_standards
• drop_all_capabilities
• container_port_name

Related Issue

Closes #53

---

Generated by VlamGuard