Embed Flask security recommendations inline instead of relying on URL
fetching at runtime. Add structured sections for resource limits, XSS,
CSRF, security headers, CSP, cookies, secrets, CORS, host validation,
and additional checks. Include a grading rubric for audit summaries.
