Keep V22 security working material with its questions

[james8464]

Summary

• Keep the V22 normal-print security message cards, threat working table and dependent 3i–3l questions on one page.
• Preserve correction, large-print, UK and V13–V21 package rendering paths; do not mutate the immutable V18 network case or scoring.
• Tighten the page-association regression test after read-only review. This is a layout repair, not a full-paper fidelity pass.

Verification

• TDD: original V22 normal-print association assertion failed before the rendering change; focused normal/large tests now pass.
• Full local pytest: 2691 passed, 2 skipped (5 existing SWIG warnings).
• Ruff, repository hygiene, release compliance, diff check, Graphify update, repository inventory: pass.
• Retained V22 package replay (not a new live run): normal subject 11 pages, correction 18; large subject 14, correction 26. Visually inspected affected normal p10–11 and large p13–14 using PDF skill; no clipping. Page whitespace and whole-paper fidelity remain a manual HOLD against the official 2026 Métropole reference.
• Fresh read-only reviewer found no production blocker and requested the now-added stronger page-association assertion.

Preserve prior pinned live artifacts and hashes. No final UK/French matrix is launched by this PR.