feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

Mapped every skill to NIST CSF 2.0 subcategory IDs (GV/ID/PR/DE/RS/RC functions)
based on subdomain and content analysis. Restores 11 skills corrupted during
prior rebase, re-enriching with ATLAS, D3FEND, NIST AI RMF, and CSF 2.0 fields.

All 754 skills now carry structured mappings for all 5 security frameworks:
- MITRE ATT&CK (in tags)
- MITRE ATLAS v5.5 (atlas_techniques)
- MITRE D3FEND v1.3 (d3fend_techniques)
- NIST AI RMF 1.0 (nist_ai_rmf)
- NIST CSF 2.0 (nist_csf)

skills/implementing-devsecops-security-scanning/SKILL.md

@@ -1,19 +1,32 @@
 ---
 name: implementing-devsecops-security-scanning
-description: >
-  Integrates Static Application Security Testing (SAST), Dynamic Application
-  Security Testing (DAST), and Software Composition Analysis (SCA) into CI/CD
-  pipelines using open-source tools. Covers Semgrep for SAST, Trivy for SCA
-  and container scanning, OWASP ZAP for DAST, and Gitleaks for secrets
-  detection. Activates for requests involving DevSecOps pipeline setup,
-  automated security scanning in CI/CD, SAST/DAST/SCA integration, or
-  shift-left security implementation.
+description: 'Integrates Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software
+  Composition Analysis (SCA) into CI/CD pipelines using open-source tools. Covers Semgrep for SAST, Trivy for SCA and container
+  scanning, OWASP ZAP for DAST, and Gitleaks for secrets detection. Activates for requests involving DevSecOps pipeline setup,
+  automated security scanning in CI/CD, SAST/DAST/SCA integration, or shift-left security implementation.
+
+  '
 domain: cybersecurity
 subdomain: application-security
-tags: [devsecops, SAST, DAST, SCA, semgrep, trivy, owasp-zap, gitleaks, CI-CD, shift-left]
+tags:
+- devsecops
+- SAST
+- DAST
+- SCA
+- semgrep
+- trivy
+- owasp-zap
+- gitleaks
+- CI-CD
+- shift-left
 version: 1.0.0
 author: mahipal
 license: Apache-2.0
+nist_csf:
+- PR.PS-01
+- PR.PS-04
+- ID.RA-01
+- PR.DS-10
 ---
 
 # Implementing DevSecOps Security Scanning