Securing platform engineering: Embedding security controls, policies, and monitoring by design