Add orynval-labs (Local-first NHI and MCP security scanners) - #753

Description

Adds orynval-labs to the DevOps section.

orynval-labs provides three offline, read-only Go CLI utilities:

• nhi-ghost: Scans infrastructure configs for stale, over-privileged, or orphaned machine credentials.
• mcp-drift: Audits Model Context Protocol (MCP) server definitions and flags permission drift from baselines.
• trust-proof: Generates grounded security questionnaire responses from local evidence files and flags unsupported controls as UNKNOWN.

Quality Checklist

• Pure Go implementation, single static binaries.
• Offline and read-only (zero telemetry).
• Apache-2.0 License and documentation with testdata.
• Placed at the bottom of the relevant category (per contributing.md) with a concise, non-promotional description ending in a period.