Nyx Scanner documentation

Deterministic local-first SAST for source-to-sink taint, browser triage, SARIF, CI, configuration, and detector internals.