[Sync] Update project files from source repository (b318071)

[mrz1836]

What Changed

• Updated MAGE_X_VERSION from v1.12.2 to v1.13.0 in .github/.env.base
• Replaced real CVE exclusion examples with fake/placeholder examples in NANCY_EXCLUDES and MAGE_X_CVE_EXCLUDES (changed from CVE-2024-38513,CVE-2023-45142 to CVE-9999-12345,CVE-9999-43210)
• Updated comments for CVE exclusion variables to clarify they are "fake examples"
• Increased GO_BROADCAST_AI_MAX_TOKENS from 2000 to 5000
• Added new commented-out debug configuration option GO_BROADCAST_DEBUG_DIFF_PATH
• Added permissions: contents: read with explanatory comment to three GitHub workflow files (dependabot-auto-merge.yml, stale-check.yml, sync-labels.yml)

Why It Was Necessary

• Upgrade to latest mage-x version to incorporate new features and fixes
• Replace real CVE exclusions with placeholder examples to avoid hardcoding specific vulnerabilities in base configuration
• Increase AI token limit to support more comprehensive AI-generated content in broadcast operations
• Add explicit permissions declarations to workflow jobs to follow GitHub Actions security best practices for sparse checkout operations

Testing Performed

• Verify mage-x v1.13.0 compatibility with existing workflows and build processes
• Validate that CVE exclusion format remains compatible with Nancy and govulncheck tooling
• Test AI broadcast functionality with increased token limit to ensure proper operation
• Confirm GitHub workflow permissions don't break existing sparse checkout and environment loading operations

Impact / Risk

• Low risk: Version bump to mage-x follows semantic versioning (minor version update)
• Configuration change: Teams using this base configuration will need to replace placeholder CVE exclusions with actual values if needed
• Workflow behavior: Added permissions are explicitly scoped to read-only, maintaining security posture while meeting GitHub Actions requirements
• AI generation: Increased token limit may result in slightly higher API costs but enables more comprehensive AI-generated content

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud