Add the reviewed immutable shared CodeQL caller. Preserve existing source languages and add Actions scanning. Local actionlint and actual source-inventory selection passed. Merge requires accepted exact-head scanner uploads and existing CI gates. Use a ci: squash commit so the published orb selects test-only CI maintenance without artifact publication.
Co-Authored-By: Codex (GPT-6) <noreply@openai.com>
Architecture audit pass 2026-05-21. Minimal CODEOWNERS file
making the implicit ownership explicit.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
james.maesandClaude Opus 4.7