Summary

Add a reusable first-party GitHub Action so other repositories can adopt CVE Lite CLI in GitHub Actions with a simple uses: line.

Closes #92.

What Changed

• added a composite GitHub Action at the repository root via action.yml
• supported key inputs for path, fail-on, verbose, prod-only, offline, offline-db, and sync-advisories
• added copy-paste GitHub Action examples to the README, including an offline workflow example
• removed the roadmap item that still described the GitHub Action as future work

Verification

• npm test
• npm run build

Notes

The first version is intentionally focused on the core scan workflow and the current real CLI options. It avoids exposing unsupported output modes through the action interface.