Refactor security target into dedicated security/ folder

.rhiza/rhiza.mk

@@ -65,6 +65,7 @@ export UV_VENV_CLEAR := 1
 
 # Include split Makefiles
 -include tests/tests.mk
+-include security/security.mk
 -include book/book.mk
 -include book/marimo/marimo.mk
 -include presentation/presentation.mk

security/security.mk

@@ -0,0 +1,17 @@
+## security.mk - Security scanning targets
+# This file is included by the main Makefile.
+# It provides targets for security vulnerability scans.
+
+# Declare phony targets (they don't produce files)
+.PHONY: security
+
+##@ Security
+
+# The 'security' target performs security vulnerability scans.
+# 1. Runs pip-audit to check for known vulnerabilities in dependencies.
+# 2. Runs bandit to find common security issues in the source code.
+security: install ## run security scans (pip-audit and bandit)
+	@printf "${BLUE}[INFO] Running pip-audit for dependency vulnerabilities...${RESET}\n"
+	@${UVX_BIN} pip-audit
+	@printf "${BLUE}[INFO] Running bandit security scan...${RESET}\n"
+	@${UVX_BIN} bandit -r ${SOURCE_FOLDER} -ll -q

tests/tests.mk

@@ -4,7 +4,7 @@
 # executing performance benchmarks.
 
 # Declare phony targets (they don't produce files)
-.PHONY: test benchmark typecheck security mutate docs-coverage
+.PHONY: test benchmark typecheck mutate docs-coverage
 
 # Default directory for tests
 TESTS_FOLDER := tests
@@ -55,15 +55,6 @@ typecheck: install ## run mypy type checking
 	  printf "${YELLOW}[WARN] Source folder ${SOURCE_FOLDER} not found, skipping typecheck${RESET}\n"; \
 	fi
 
-# The 'security' target performs security vulnerability scans.
-# 1. Runs pip-audit to check for known vulnerabilities in dependencies.
-# 2. Runs bandit to find common security issues in the source code.
-security: install ## run security scans (pip-audit and bandit)
-	@printf "${BLUE}[INFO] Running pip-audit for dependency vulnerabilities...${RESET}\n"
-	@${UVX_BIN} pip-audit
-	@printf "${BLUE}[INFO] Running bandit security scan...${RESET}\n"
-	@${UVX_BIN} bandit -r ${SOURCE_FOLDER} -ll -q
-
 # The 'mutate' target performs mutation testing using mutmut.
 # 1. Runs mutmut to apply mutations to the source code and check if tests fail.
 # 2. Displays the results of the mutation testing.