feat: pin-freshness audit + composite-action coverage (#136, #137 bac… #81

Job	Run time
Type Check	18s
Action pinning audit	8s
Coverage	25s
Architecture (import-linter)	11s
Pre-commit	1m 14s
Lint & Format	22s
Unit tests	22s
src/ README audit	8s
Frontend Quality	20s
Branch-protection contexts sync	12s
File length	7s
Aspirational ticket cite	5s
Commit-type sync	9s
Frontend Build	15s
Tests required	0s
Version bump check	0s
	4m 16s

Provide feedback