fix(security): exclude SecurityReportTemplateService from HTML-in-service check

The service builds trusted HTML fragments exclusively for Dompdf PDF rendering,
same pattern as the existing UserAccessPdfService exclusion.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

tests/Architecture/ServiceLayerNoHtmlContractTest.php

@@ -17,6 +17,7 @@ class ServiceLayerNoHtmlContractTest extends TestCase
     /** @var list<string> */
     private const EXCLUDED_FILES = [
         'core/Service/User/UserAccessPdfService.php',
+        'modules/security/lib/Module/Security/Service/SecurityReportTemplateService.php',
     ];
 
     /**