docs: add security test file

[sahar042]

This is a benign PR to test whether the pull_request_target CLA workflow triggers automatically on PRs from forks, demonstrating that secrets are exposed to the action without any maintainer approval.

This is a security test -- no malicious intent.

Made with Cursor

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}