GitHub security extension

Fix code scanning alerts without bouncing between github.com and your editor. In public preview, the extension lists your repository’s open alerts by severity, lets Copilot explain or fix them in your local working copy only (nothing is committed or pushed), and runs /security-review on your current changes.