A team wants Claude Code to delegate security reviews to a dedicated helper that can only read and search the codebase, never edit files or run shell commands, and that follows its own review checklist. The helper must be shared with everyone through the repository. What should they do?