fix: Enforce security event severity defaults

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>

core/lib/Security/Event/SecurityEvent.php

@@ -51,6 +51,13 @@ class SecurityEvent extends Event
     public const SEVERITY_ERROR = 3;
     public const SEVERITY_CRITICAL = 4;
 
+    public function __construct(string $name, array $data = [])
+    {
+        parent::__construct($name, $data);
+
+        $this->severity = self::getSeverityForEvent($name);
+    }
+
     /**
      * Create a security event with common parameters
      */
@@ -63,10 +70,7 @@ class SecurityEvent extends Event
         $event = new self($name, $data);
         $event->ipAddress = $ipAddress;
         $event->deviceFingerprint = $deviceFingerprint;
-        
-        // Set default severity based on event type
-        $event->severity = self::getSeverityForEvent($name);
-        
+
         return $event;
     }