[REVIEW] hipaa-review: add de-identified reidentification and break-glass audit trail gates

[JamesJi79]

Adds two review gates for hipaa-review skill:

1. De-identified Reidentification Risk Gate (closes [REVIEW] hipaa-review: add de-identified dataset reidentification gates #2679)

   • Reidentification linkage analysis check
   • Residual identifiability audit check

2. Break-Glass Audit Trail Evidence Gate (closes [REVIEW] hipaa-review: add break-glass audit trail evidence gates #2678)

   • Break-glass accountability controls check
   • Post-use review enforcement check

Both gates add evidence-before-classification guardrails to prevent false-positive findings for HIPAA de-identification and emergency access patterns.

[github-actions]

Thanks for the submission! 🙏 SecuritySkills is now issue-first: contributions need a linked issue that a maintainer has marked approved before a PR is opened.

Please open an issue describing the skill, wait for the approved label, then reopen this PR with Closes #<issue> in the description. The PR template lists everything we'll look for (including an independently runnable reproduction).