build: modernize build, packaging, and metadata configuration across CMake and Bazel

Refactor project build configuration to improve portability, security defaults, and packaging behavior across platforms and build systems.

- CMake:
  - Default BUILD_SHARED_LIBS to top-level project usage instead of always ON.
  - Require the configured C++ standard (C++98) and keep extensions disabled.
  - Enable hardening by default and migrate from global flag string mutation to add_compile_options/add_link_options.
  - Add additional linker hardening checks (including -Wl,-z,separate-code) and apply safer non-Debug conditionals where appropriate.
  - Add ENABLE_INSTALLATION and ENABLE_PACKAGING options, both defaulting to top-level usage.
  - Gate install, pkg-config generation, and CPack setup behind ENABLE_INSTALLATION/ENABLE_PACKAGING.
  - Add namespace alias target (PROJECT_NAME::AVO) and improve export/install package metadata.
  - Add PACKAGE_INFO and SBOM export/install support for newer CMake versions.
  - Use TYPE DOC for documentation/license installation and gate docs install on ENABLE_INSTALLATION.

- Bazel:
  - Make shared library target publicly visible.
  - Bump CPS metadata compatibility/version and add a release CPS descriptor with OS-specific library locations.
  - Include both base and release CPS descriptors in packaged artifacts.
  - Tighten Debian package architecture selection to supported CPUs with explicit no-match error.
  - Restrict Debian package target compatibility to Linux.
  - Improve source target options: platform-specific warning flags, Windows export define, and include path handling.
  - Remove obsolete source file from Bazel target sources.

- Examples:
  - Introduce BUILD_EXAMPLES option in CMake (default top-level).
  - Add PIE capability check for example executables.
  - Normalize and clean up example target definitions and properties.
  - Add compile warning/security flags to Bazel example tests.

- CI and dependency automation:
  - Remove brew upgrade step from CI setup jobs to reduce volatility.
  - Remove Dependabot workflow config and retain Renovate licensing metadata.

- Metadata and cleanup:
  - Add SPDX license companion file for renovate.json.
  - Remove legacy REUSE dep5 metadata file.
  - Remove obsolete src/Export.cc implementation.

Net effect:
- 14 files changed, 353 insertions, 1316 deletions.
- Consolidates build logic, improves hardening defaults, and makes install/packaging behavior friendlier for embedded/subproject consumption.

Author: snape

.bazelrc

@@ -38,8 +38,6 @@ build --sandbox_default_allow_network=false
 build:macos --apple_generate_dsym=true
 build:macos --apple_crosstool_top=@local_config_apple_cc//:toolchain
 build:macos --apple_platform_type=macos
-build:macos --crosstool_top=@local_config_apple_cc//:toolchain
-build:macos --host_crosstool_top=@local_config_apple_cc//:toolchain
 
 common --enable_platform_specific_config=true
 common --heap_dump_on_oom=true

.github/dependabot.yml

@@ -167,7 +167,6 @@ jobs:
       - name: setup
         run: |
           brew update -q
-          brew upgrade -f -q
           brew bundle install -q
           brew cleanup -q -s
           rm -rf $(brew --cache)
@@ -463,7 +462,6 @@ jobs:
       - name: setup
         run: |
           brew update -q
-          brew upgrade -f -q
           brew bundle install -q
           brew cleanup -q -s
           rm -rf $(brew --cache)

.github/workflows/ci.yml

@@ -75,6 +75,7 @@ pkg_files(
 
 cc_shared_library(
     name = "AVO",
+    visibility = ["//visibility:public"],
     deps = ["//src:AVO"],
 )
 
@@ -101,7 +102,7 @@ cat << 'EOF' > $@
     }
   },
   "cps_path": "@prefix@/lib/cps/AVO",
-  "cps_version": "0.13.0",
+  "cps_version": "0.14.1",
   "default_components": ["AVO"],
   "description": "Reciprocal Collision Avoidance with Acceleration-Velocity Obstacles",
   "license": "Apache-2.0",
@@ -114,9 +115,64 @@ EOF
 """,
 )
 
+genrule(
+    name = "avo_release_cps",
+    outs = ["AVO@release.cps"],
+    cmd = select({
+        "@platforms//os:macos": """
+cat << 'EOF' > $@
+{
+  "components":
+  {
+    "AVO":
+    {
+      "location": "@prefix@/lib/libAVO.dylib"
+    }
+  },
+  "configuration": "Release",
+  "name": "AVO"
+}
+EOF
+""",
+        "@platforms//os:windows": """
+cat << 'EOF' > $@
+{
+  "components":
+  {
+    "AVO":
+    {
+      "location": "@prefix@/lib/AVO.dll"
+    }
+  },
+  "configuration": "Release",
+  "name": "AVO"
+}
+EOF
+""",
+        "//conditions:default": """
+cat << 'EOF' > $@
+{
+  "components":
+  {
+    "AVO":
+    {
+      "location": "@prefix@/lib/libAVO.so"
+    }
+  },
+  "configuration": "Release",
+  "name": "AVO"
+}
+EOF
+""",
+    }),
+)
+
 pkg_files(
     name = "cps",
-    srcs = ["AVO.cps"],
+    srcs = [
+        "AVO.cps",
+        "AVO@release.cps",
+    ],
     attributes = pkg_attributes(mode = "0644"),
     prefix = "usr/lib/cps/AVO",
 )
@@ -197,11 +253,13 @@ pkg_tar(
 
 pkg_deb(
     name = "deb",
-    architecture = select({
-        "@platforms//cpu:arm": "amd64",
-        "@platforms//os:macos": "arm64",
-        "//conditions:default": "all",
-    }),
+    architecture = select(
+        {
+            "@platforms//cpu:aarch64": "arm64",
+            "@platforms//cpu:x86_64": "amd64",
+        },
+        no_match_error = "Unsupported CPU for //:deb. Supported CPUs: aarch64, x86_64.",
+    ),
     data = ":tar",
     depends = [
         "libc6",
@@ -215,6 +273,7 @@ pkg_deb(
     package = "avo",
     priority = "optional",
     section = "contrib/libdevel",
+    target_compatible_with = ["@platforms//os:linux"],
     triggers = "triggers",
     version = "1.0.1",
 )