Refinery patrol: Add banners and wisp-based execution (gt-qz2l)

- Add step banners with emojis for each patrol step
- Add startup banner for Refinery initialization
- Add patrol summary banner at end of cycle
- Document wisp-based execution pattern (spawn/squash)
- Add Propulsion Principle for startup protocol
- Update refinery.md.tmpl template
- Update prompts/roles/refinery.md
- Update gastown refinery CLAUDE.md

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.beads/formulas/security-audit.formula.yaml

@@ -0,0 +1,31 @@
+formula: security-audit
+type: aspect
+description: >
+  Cross-cutting security concern. Applies security scanning before and
+  after implementation steps.
+version: 1
+pointcuts:
+  - glob: "*.implement"
+  - glob: "*.submit"
+advice:
+  around:
+    before:
+      - id: security-prescan
+        description: >
+          Pre-implementation security check. Review for secrets/credentials
+          in scope. Check dependencies for known vulnerabilities.
+        args:
+          target: "{step.id}"
+    after:
+      - id: security-postscan
+        description: >
+          Post-implementation security scan. Scan new code for vulnerabilities
+          (SAST). Check for hardcoded secrets. Review for OWASP Top 10 issues.
+        args:
+          target: "{step.id}"
+        output:
+          approved: boolean
+          findings: list
+      - gate:
+          condition: "security-postscan.output.approved == true"
+          message: Security approval required before proceeding