Add agent fingerprinting, client certificate auth, and security audit documentation

This commit adds:
- Database migrations for app_delta fingerprints and client certificates
- Scripts for certificate generation and fingerprint backfilling
- Comprehensive security audit reports and findings tracking
- Implementation documentation for certificate authentication
- Test utilities for certificate renewal and fingerprinting
- GE-ENFORCE collector fix documentation

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

run_dev_sqlite.py

@@ -0,0 +1,26 @@
+#!/usr/bin/env python
+"""Development server with SQLite support (patches engine options)."""
+import os
+import sys
+
+# Set environment for development with SQLite
+os.environ['FLASK_ENV'] = 'development'
+os.environ['DATABASE_URL'] = f"sqlite:///{os.path.abspath('instance/shopdb.db')}"
+
+# Import and patch config before app creation
+from shopdb.config import DevelopmentConfig
+from sqlalchemy.pool import StaticPool
+
+# Override engine options for SQLite (no charset parameter)
+DevelopmentConfig.SQLALCHEMY_ENGINE_OPTIONS = {
+    'connect_args': {'check_same_thread': False},
+    'poolclass': StaticPool,
+}
+
+# Now import and run the app
+from shopdb import create_app
+
+app = create_app('development')
+
+if __name__ == '__main__':
+    app.run(debug=True, host='127.0.0.1', port=5000)