[submit-deffender] grounding, provenance, single-profile guardrails, streamlined system prompt

[MollyMoriJing]

Changes:

• Structured guardrails: single-profile mode, provenance-aware rationale synthesis, entity grounding with foreign-entity detection, improved fallback scoring
• Security pipeline: updated spotlighting format, refined threat analysis
• Agent: evidence compilation, generation pipeline hardening
• System template: streamlined security principles for better LLM adherence
• Framework: run_scenario and scorecard improvements
• Tests: updated defender execute, guardrails, security, ablation, and scorecard tests