Split tests/Unit/Security/Batch12SecurityRegressionTest.php into behavior-named
files under the existing vulnerability-class layout, per the review feedback:
Auth/TwoFaCookieAndResetTokenConstantTimeTest.php GHSA-4qx8
Ssrf/PackageRepoManifestFetchTest.php GHSA-54fg
ShellInjection/DataInputQuotedPlaceholderTest.php GHSA-5v3j
ShellInjection/SpikekillRrdfileEscapeTest.php GHSA-vhh2
Each file reaches the repo root via dirname(__DIR__, 4) for its one
subfolder-deep location. No assertion changes; pure relocation.