Add USA regulation skills

[jabrena]

Description

Create Java enterprise regulation skills for the USA sources identified in #848.

Scope

• GLBA Safeguards Rule (FTC): https://www.ftc.gov/legal-library/browse/rules/safeguards-rule
• NYDFS Cybersecurity Regulation (23 NYCRR 500): https://www.dfs.ny.gov/system/files/documents/2023/03/23NYCRR500_0.pdf
• SEC Cybersecurity Disclosure Rules: https://www.sec.gov/rules/2023/07/cybersecurity-risk-management-strategy-governance-and-incident-disclosure

Expected Outcome

• Add regulation-aware Java engineering guidance for GLBA Safeguards.
• Add regulation-aware Java engineering guidance for NYDFS cybersecurity.
• Add regulation-aware Java engineering guidance for SEC cybersecurity disclosure readiness.
• Keep the guidance framed as engineering controls and evidence readiness, not legal advice.
• Escalate applicability, covered-entity status, certification, disclosure, materiality, and legal interpretation to legal, compliance, privacy, security, disclosure, audit, executive, or risk owners.

Source

Derived from #848.