eigi-security-fixes

Works through a security review's fix list one finding at a time, applying each fix in isolation, fixing sibling instances of the same pattern, running the finding's verify-after check, then re-verifying the diff against four criteria and stopping if the fix is only partial. Use after eigi-security-review has produced a ranked fix list. It does not hunt for new issues; re-run the review for that.