Added a new security guide in docs/security.md providing comprehensive coverage of kernel authentication primitives, including bearer/apiKey, session management, and rate limiting. This update also syncs the technical documentation with recent architectural changes and clarifies usage in the README and routing documentation.