Vigil — EU Cyber Resilience Act readiness packs

Flat-fee CRA readiness: disclosure policy and security.txt, a vulnerability-handling SOP, a CycloneDX SBOM, and the 24h/72h/14-day reporting runbook.