Split report-reading guidance out of deploy-prowler into its own
how-to (read-compliance-reports). Add security & compliance
reference card (reference/operations/security) following the
pattern of the observability card.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>