Add ez-assistant and kerberos service folders

docker-compose/ez-assistant/docs/cli/security.md

@@ -0,0 +1,24 @@
+---
+summary: "CLI reference for `moltbot security` (audit and fix common security footguns)"
+read_when:
+  - You want to run a quick security audit on config/state
+  - You want to apply safe “fix” suggestions (chmod, tighten defaults)
+---
+
+# `moltbot security`
+
+Security tools (audit + optional fixes).
+
+Related:
+- Security guide: [Security](/gateway/security)
+
+## Audit
+
+```bash
+moltbot security audit
+moltbot security audit --deep
+moltbot security audit --fix
+```
+
+The audit warns when multiple DM senders share the main session and recommends `session.dmScope="per-channel-peer"` for shared inboxes.
+It also warns when small models (`<=300B`) are used without sandboxing and with web/browser tools enabled.