feat(scan): add initial SAST pipeline

pyproject.toml

@@ -0,0 +1,23 @@
+[build-system]
+requires = ["uv_build>=0.8.13,<0.9.0"]
+build-backend = "uv_build"
+
+[project]
+name = "openultrasast"
+version = "0.1.0"
+description = "OpenCode-oriented SAST harness for evidence-gated security analysis"
+readme = "README.md"
+requires-python = ">=3.11"
+dependencies = []
+
+[project.scripts]
+ousast = "openultrasast.cli:main"
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["src"]
+
+[dependency-groups]
+dev = [
+    "pytest>=8",
+]