chore: add Loupe scanner profile

[edgepillar]

Summary

• Add a repository-specific Loupe scanner profile at .loupe/scanner-config.json.
• Cover the TypeScript application and current operational files, including the Coolify Compose file and Docker entrypoint.
• Document guarded repository registration, baseline and incremental scans, and profile updates.

Scanner scope and safety

• The initial baseline is limited to one concurrent file.
• The documented registration uses --no-reporting, --verification-enabled, and --require-approval, with no recurring scan interval.
• The profile contains no credentials, wallet material, operator secrets, or reporting tokens.
• This PR does not run Loupe or publish findings.

Dependency and validation

• The profile requires a Loupe deployment with extra_source_paths support: feat: support per-repository scanner profiles edgepillar/loupe#1.
• Against 0x3639/testnet main at 486fc6d8ef3eede5926d15c1da4e0ad99a3c521c, the JSON parsed and all eight configured source paths existed.
• git diff --check passed.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

_{Comment @coderabbitai help to get the list of available commands.}