Add monthly scan comment to issue for compliance

Your security scan summaries aren't consistently recorded on the tracking issue, leaving monthly compliance status unclear to reviewers. It posts a month-stamped scan comment only when missing, so reviewers have the current record before monthly audits.