chore(docs): archive obsolete v0.12.6 security docs

Move ASVS_CHECKLIST_v0.12.6.md, PENTEST_REPORT_VEZA_v0.12.6.md, and
REMEDIATION_MATRIX_v0.12.6.md to docs/archive/ — all reference a
pentest conducted on v0.12.6 (2026-03), stale relative to the current
v1.0.7 codebase (different security middleware, different payment
flow, different config validation).

Update CLAUDE.md tree listing and AUDIT_REPORT.md §9.1 to reflect the
archive location. Keep docs/SECURITY_SCAN_RC1.md (still current).

Closes AUDIT_REPORT §9.1 obsolete-doc item.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

AUDIT_REPORT.md

@@ -580,7 +580,7 @@ Classement pour la suite (post-v1.0.7-rc1 → v1.0.7 final → v1.0.8).
 - `internal/repository/` (orphelin)
 - `proto/chat/chat.proto` + types `veza-common/src/chat.rs`
 - `apps/web/src/components/ui/{hover-card,dropdown-menu,optimized-image}/` orphelins
-- `docs/ASVS_CHECKLIST_v0.12.6.md` + `docs/PENTEST_REPORT_VEZA_v0.12.6.md` (v0.12.6 obsolète)
+- ~~`docs/ASVS_CHECKLIST_v0.12.6.md` + `docs/PENTEST_REPORT_VEZA_v0.12.6.md` + `docs/REMEDIATION_MATRIX_v0.12.6.md`~~ ✅ archivés dans `docs/archive/` (2026-04-23)
 
 ### 9.2 "À finir avant de commencer quoi que ce soit de nouveau"
 

CLAUDE.md

@@ -105,9 +105,8 @@ veza/
 │   ├── PRODUCTION_DEPLOYMENT.md
 │   ├── STAGING_DEPLOYMENT.md
 │   ├── SECURITY_SCAN_RC1.md
-│   ├── ASVS_CHECKLIST_v0.12.6.md
-│   ├── PENTEST_REPORT_VEZA_v0.12.6.md
 │   └── archive/                # Retros, smoke tests, plans historiques
+│                               # (v0.12.6 ASVS+PENTEST+REMEDIATION archivés ici 2026-04-23)
 │
 ├── veza-docs/                  # Site Docusaurus séparé
 │   ├── docs/current/           # Docs actuelles