[FEATURE] Implement LLM Egress Firewall Auditor (E9-F2)

[KbWen]

Feature Description

Implement Epic 9, Feature 2 (E9-F2): LLM Egress Firewall Auditor (currently marked as 🟡 in the product backlog).

To prevent compromised or buggy AI Agents from performing unauthorized network requests (data exfiltration), we need a scanner that checks if the project has defined an egress firewall config or egress controls in its execution environment.

Proposed Capabilities

1. Network Config Check: Check for Docker Compose configurations, Kubernetes NetworkPolicies, or AWS Security Group rules to see if egress traffic is restricted (specifically restricting agent outbound traffic to trusted API endpoints).
2. Missing Outbound Constraints warning: Raise a warning if an agent environment allows unrestricted 0.0.0.0/0 outbound traffic.
3. Mock Egress Verification: Help developers lint and test their container configs for sandbox security.

Proposed Implementation Plan

• Create src/ghostcheck/checks/egress_auditor.py.
• Add parsing rules for network configurations.
• Verify security configurations for common deployment platforms.