docs(i18n): document security-guidance in zh-Hans

[r266-tech]

Summary

• add the shipped security-guidance plugin to the zh-Hans bundled-plugin table
• localize its file-write warning behavior, 25-rule coverage, warn/block/disable modes, and enable/disable commands
• document the two upstream review layers that Hermes does not yet implement

Validation

• compared the translation with the current English section on main
• verified write_file, patch, and skill_manage targets plus both environment controls in plugins/security-guidance/__init__.py
• verified the shipped SECURITY_PATTERNS list contains 25 entries
• confirmed no overlapping open zh-Hans PR or target-file relocation
• git diff --check

Docs-only change; runtime behavior is unchanged. This refresh incorporates the maintainer validation on the original PR.

[teknium1]

Thanks for filling this localization gap. Current main still lacks the security-guidance row and section in website/i18n/zh-Hans/docusaurus-plugin-content-docs/current/user-guide/features/built-in-plugins.md:58-59,118, while the English source documents it at website/docs/user-guide/features/built-in-plugins.md:59,121-141. The translated behavior also matches the shipped plugin hooks in plugins/security-guidance/__init__.py:202-259.

Automated hermes-sweeper review.

[r266-tech]

Refreshed this onto current main after the high-salvage review. The focused zh-Hans row and section still match the canonical English docs and shipped plugin behavior: three target tools, 25 patterns, and warn/block/disable controls. No runtime files are changed; git diff --check passes.