Vulnerability response

Give each fix an owner and a way to verify it.

Create remediation plans for vulnerability work, then track active, blocked, and completed plans. Search by plan, owner, or vulnerability and keep verification evidence with the work item.