feat(lab10): defectdojo capstone + governance report

[1r444444]

Summary

• add Lab 10 DefectDojo governance report with import counts, severity totals, duplicate analysis, SLA matrix, SLA compliance, Labs 8/9 gap, risk acceptance, and executive summary
• add bonus five-minute walkthrough script

Verification

• ran DefectDojo 2.58.3 release stack locally on port 8081
• imported Lab 4-7 reports via DefectDojo API; converted ZAP JSON to XML for the 2.58.3 ZAP parser
• compared against recent Lab 10 PRs (feat(lab10): defectdojo capstone + governance report #1857, feat(lab10): DefectDojo capstone + governance report #1855, Feature/lab10 #1854, Feature/lab10 #1849) for coverage and PR scope