dfae1d4648
- lint.yml: add notify-failure Matrix alert job; add Tag deployed commit step (main branch only) with deploy-YYYY.MM.DD-N tagging via Gitea API; add permissions: contents: write to deploy job - security.yml: new workflow running semgrep with p/php and p/owasp-top-ten configs on push, PR, and weekly schedule Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>