Secure development and deployment guidance