SecOp Blueprint — Bare-Metal Firewalls, Zero-Trust Architecture & Threat Mitigation