Coverage gate at 65% is low for a security-focused tool

[SemTiOne]

Summary

pyproject.toml:71 sets fail_under = 65. For a tool that handles secrets, image verification, and security scanning, this is below the 80%+ industry norm.

Problem

Untested branches in cli/security.py (768 lines), cli/image_verification.py, and cli/main.py can harbor regressions that ship silently. The broad except Exception catches at cli/main.py:700,733 are particularly under-tested.

Suggested fix

1. Raise fail_under to 75 immediately
2. Add tests for untested branches in security and image verification modules
3. Target 80%+ before v1.0

Files involved

• pyproject.toml (line 71)