feat: add security pipeline finding tools

What does this merge request do and why?

Split off tools from tools+flow MR here: !3436 (closed)

How to set up and validate locally

• !3436 (closed)
• Set up ai gateway, enable agentic chat IDE extensions
• ask about a pipeline security finding (uuid)

Merge request checklist

• Tests added for new functionality. If not, please raise an issue to follow up.
• Documentation added/updated, if needed.
• If this change requires executor implementation: verified that issues/MRs exist for both Go executor and Node executor or confirmed that changes are backward-compatible and don't break existing executor functionality.