Security Headers Audit API