rename(phase 1): CapaKraken → Nexus across code, UI, docs, CI (#61) Co-authored-by: Hartmut Nörenberg <hn@hartmut-noerenberg.com> Co-committed-by: Hartmut Nörenberg <hn@hartmut-noerenberg.com>
Gap analysis of CapaKraken against Accenture AppSec Standard V7.30. 23 action items across 3 priority levels. Critical (before production): MFA, session timeouts, HSTS, CSP, rate limiting, Sentry DSN, failed auth logging. High (30 days): AIR registration, security architecture doc, SAST/DAST, XSS sanitization, login/logout audit. Already compliant: SQL injection (Prisma), Argon2 hashing, RBAC, Zod input validation, audit logging, security headers (partial). Co-Authored-By: claude-flow <ruv@ruv.net>