feat: make all security features available on every tier (#1502)

Scan policies, deploy enforcement, the suppression-aware deploy-block
toggle, SARIF export, and OpenVEX export now work on Community, matching
the rest of the vulnerability-scanning surface that was already free.

Backend: drop the tier gate from the seven security routes and from the
dashboard configuration-status scan-policies row, so the Dashboard and
Fleet config cards stop hiding the Vulnerability scanning row. Reading
policies stays auth-only; mutations and exports stay admin-only.

Frontend: always show the Policies tab and panel, the SARIF and VEX
export actions, and the honor-suppressions toggle for admins.

Docs: move scan policies, SARIF, and OpenVEX to every tier across the
feature and API-reference pages; clarify that Fleet Sync's cross-node
replication remains the paid part.

frontend/src/components/settings/SuppressionsPanel.tsx

@@ -12,7 +12,6 @@ import { apiFetch } from '@/lib/api';
 import { FleetTabHeading } from '@/components/fleet/FleetEmptyState';
 import type { CveSuppression } from '@/types/security';
 import { useAuth } from '@/context/AuthContext';
-import { useLicense } from '@/context/LicenseContext';
 
 const CVE_ID_RE = /^(CVE-\d{4}-\d{4,}|GHSA-[\w-]{14,})$/;
 const PAGE_SIZE = 8;
@@ -39,7 +38,6 @@ interface SuppressionsPanelProps {
 
 export function SuppressionsPanel({ isReplica }: SuppressionsPanelProps) {
   const { isAdmin } = useAuth();
-  const { isPaid } = useLicense();
   const [rows, setRows] = useState<CveSuppression[]>([]);
   const [loading, setLoading] = useState(true);
   const [dialogOpen, setDialogOpen] = useState(false);
@@ -205,12 +203,10 @@ export function SuppressionsPanel({ isReplica }: SuppressionsPanelProps) {
         action={
           isAdmin && !isReplica ? (
             <div className="flex items-center gap-2">
-              {isPaid && (
-                <Button size="sm" variant="outline" onClick={handleExportVex}>
-                  <Download className="w-4 h-4 mr-1.5" />
-                  Export VEX
-                </Button>
-              )}
+              <Button size="sm" variant="outline" onClick={handleExportVex}>
+                <Download className="w-4 h-4 mr-1.5" />
+                Export VEX
+              </Button>
               <Button size="sm" onClick={openCreate}>
                 <Plus className="w-4 h-4 mr-1.5" />
                 Add suppression

frontend/src/components/settings/__tests__/SuppressionsPanel.test.tsx

@@ -28,10 +28,6 @@ vi.mock('@/context/AuthContext', () => ({
   useAuth: () => ({ isAdmin: true }),
 }));
 
-vi.mock('@/context/LicenseContext', () => ({
-  useLicense: () => ({ isPaid: false }),
-}));
-
 import { apiFetch } from '@/lib/api';
 import { toast } from '@/components/ui/toast-store';
 import { SuppressionsPanel } from '../SuppressionsPanel';