chore: branch-protection JSON + apply workflow + artifact cleanup + CodeQL #32

Job	Run time
Type Check	15s
Architecture (import-linter)	9s
Lint & Format	12s
Unit tests	13s
Pre-commit	1m 2s
Branch-protection contexts sync	8s
Commit-type sync	13s
Coverage	14s
	2m 26s

Provide feedback