Cleanup: controll-update-status.md filename typo + unimplemented @accountSecurityService bean

[dfcoffin]

Summary

Two minor cleanup items captured during the PR #116 session.

Items

1. controll-update-status.md — filename is typo'd ("controll") and the file is in an awkward location. Rename/relocate or remove if obsolete.
2. @accountSecurityService bean — referenced by customer controllers but not implemented anywhere in the codebase. Either implement it or remove the dangling reference so the wiring is honest.

Acceptance criteria

• controll-update-status.md renamed/relocated or removed
• @accountSecurityService reference either backed by a real bean or removed from the customer controllers

Source

PR_116_FOLLOWUP_NOTES.md item 7 (post-PR #116, 2026-05-19).