Add observer to Security

[tamish560]

Transparent MCP proxy that sits between client and server, logs every tool call to SQLite with metadata-only traces, injects trace tools, and outputs SARIF.

Forge link: https://github.com/valtors/observer
pkg.go.dev: https://pkg.go.dev/github.com/valtors/observer
goreportcard.com: https://goreportcard.com/report/github.com/valtors/observer
Coverage: https://github.com/valtors/observer (68.7%, tracked in CI)

[github-actions]

Automated Quality Checks

Required checks

❌ Repo: missing semver release

How to fix: No SemVer release tag (e.g. v1.0.0) found.
Create a tagged release:

git tag v1.0.0
git push origin v1.0.0

Or create a release via GitHub's UI at https://github.com/valtors/observer/releases/new.
❌ pkg.go.dev: unreachable
How to fix: The pkg.go.dev page could not be reached.
Ensure your module path in go.mod matches the URL. After pushing a tagged release, pkg.go.dev indexes the module automatically — this can take a few minutes. You can trigger it manually by visiting https://pkg.go.dev/your-module-path.
✅ Go Report Card: OK (grade unknown)

Additional checks

✅ License: MIT
⚠️ Maturity: repo appears to have less than 5 months of history

How to fix: Your repository needs at least 5 months of history since the first commit.
Please resubmit after the repository meets this requirement.
✅ CI/CD: GitHub Actions workflows detected
✅ README: present
⚠️ Coverage: missing from PR body
How to fix: Add a coverage service link to your PR description:

Coverage: https://app.codecov.io/gh/your-org/your-project

Popular options: [Codecov](https://codecov.io), [Coveralls](https://coveralls.io). Integrate one with your CI to track coverage automatically.

---
> **Action needed:** one or more required checks failed. Please update your PR body with the missing links and ensure the repository meets the [quality standards](https://github.com/avelino/awesome-go/blob/main/CONTRIBUTING.md#quality-standards).

_These checks are automated and do not replace maintainer review. See [CONTRIBUTING.md](https://github.com/avelino/awesome-go/blob/main/CONTRIBUTING.md) for full guidelines._

---

## PR Diff Validation

### Content checks

✅ **Files changed**: only README.md
✅ **Single item**: one package added
✅ **Link consistency**: README link matches forge link in PR body
✅ **Link text**: matches repository name
✅ **Description**: ends with punctuation
✅ **Description tone**: no promotional language detected
✅ **Category size**: Security has 60 items


_Automated diff validation — does not replace maintainer review._
<!-- Sticky Pull Request Commentpr-quality-check -->