Add penetration testing schedule and methodology document

[barry01-hash]

Establish quarterly penetration testing schedule. Define methodology: OWASP Top 10, smart contract specific tests, API fuzzing, and social engineering. Document remediation SLA (30 days critical).