Setup asks about fixing #548

Parent

#427

What to build

Setup writes the User config's [security] section. It asks whether Security runs fix reproduced findings (fix, off by default), and it writes harness out at its default, blank, so that the file shows the setting can be changed.

Acceptance criteria

• Setup asks the fixing question once, with off as its default, and writes the answer as fix under [security].
• The written file has harness under [security], at its default, with a comment saying what it does.
• Running Setup again keeps the earlier answers as defaults.