Security shouldn’t be a last-minute checklist before release. Here’s how to make it invisible — automated, fast, and part of every commit.