We eliminated 1,400 CVEs in NanoClaw's container images

A transparent, under-the-hood look at Echo's CVE reduction loop: multi-scanner detection, safe version bumps, custom backporting, and continuous automated syncing for NanoClaw.