feat(security config): add commands to manage security configuration profiles

What

Adds a glab security command group (marked EXPERIMENTAL) with:

glab security config enable <profile>  -R ns/proj
glab security config disable <profile> -R ns/proj
glab security config status <profile>  -R ns/proj

<profile> is required. and may be one of the default configuration profiles - sast, secret_detection, dependency_scanning, dependency_scanning_post_processing, container_scanning - or a custom configuration profile (in the future).

This lets project maintainers attach/detach/inspect security scan profiles without hand-written GraphQL, and unblocks agentic enablement. Part of gitlab#603899 (closed).

Depends on

• gitlab-org/api/client-go!2932 (merged) (typed SecurityScanProfiles GraphQL service).

go.mod currently pins client-go to that branch commit (pseudo-version). Before merge: bump to the released client-go tag once !2932 (closed) lands.

Testing

• Unit tests for enable/disable/status (success, unknown profile, missing arg, feature-disabled/unauthorized).
• status and auto-remediation enable/disable verified live against a project with the feature flags enabled.
• Docs regenerated via make gen-docs.