This is a public-facing task to discuss the development of various tooling to proactively security-scan Site and User JavaScript and CSS. Much of this work will remain security-protected for now (within tasks such as T419624, T420635, T302769) and we should avoid posting salient details about this work on this task for now. In the future, we hope to provide public updates on this task when they are available.