Build pipeline security

- CI/CD platform hardening (GitHub Actions, GitLab CI, Jenkins, Tekton) - Secret management in pipelines - Build artifact signing and verification (Cosign, Sigstore, Notary) - Reproducible builds - Pipeline tampering detection