[Sync] Update project files from source repository (58a7526)

[mrz1836]

What Changed

• Updated .dockerignore to include !dist/linux-amd64/ and !dist/linux-arm64/ directories alongside the existing !dist/linux/ exception
• Modified .github/.yamlfmt configuration to remove maintainer comment and add exclusion for .github/ci-tester/fixtures/workflow-invalid/.github/workflows/invalid.yml test fixture
• Updated .github/CODEOWNERS to remove entries for .github/.env.base and .github/.env.custom, and changed .github/.gitleaks.toml reference to .gitleaksignore
• Updated MAGE_X_VERSION from v1.12.1 to v1.12.2 across multiple workflow files and GitHub Actions (fortress-completion-finalize.yml, fortress-completion-statistics.yml, fortress-completion-tests.yml, fortress-test-magex.yml, fortress-test-validation.yml, pull-request-management-fork.yml, load-env action, setup-goreleaser action, setup-magex action, validate-test-results action)
• Added permissions: contents: read to fortress-completion-report.yml, fortress-pre-commit.yml, and fortress-coverage.yml workflows
• Modified environment variable files (10-coverage.env, 10-mage-x.env, 10-pre-commit.env) to update MAGE_X_VERSION
• Added permissions: contents: read security hardening to multiple workflow files (auto-merge-on-approval.yml, codeql-analysis.yml, fortress-security-scans.yml, fortress-benchmarks.yml, fortress-code-quality.yml, dependabot-auto-merge.yml, fortress-test-fuzz.yml, fortress-test-matrix.yml, fortress-setup-config.yml, fortress-warm-cache.yml, fortress-test-suite.yml, fortress.yml, scorecard.yml, pull-request-management.yml, stale-check.yml, sync-labels.yml)

Why It Was Necessary

• Architecture-specific Docker build artifacts (linux-amd64, linux-arm64) need to be included in Docker builds for multi-platform support
• Mage-X version bump to v1.12.2 brings in latest tooling improvements and fixes
• Adding explicit permissions: contents: read to workflows implements security best practices by using least-privilege principle for GitHub Actions
• CODEOWNERS updates reflect changes in repository structure and file locations

Testing Performed

• Verify Docker builds include the architecture-specific binaries from dist/linux-amd64/ and dist/linux-arm64/
• Validate all GitHub Actions workflows run successfully with Mage-X v1.12.2
• Confirm workflows with added permissions execute correctly with read-only content access
• Test yamlfmt configuration correctly excludes the invalid YAML test fixture

Impact / Risk

• Low Risk: Version bump from v1.12.1 to v1.12.2 is a minor patch update to tooling
• Security Improvement: Adding explicit permissions reduces potential attack surface in GitHub Actions workflows by limiting default token permissions
• Build Enhancement: Architecture-specific binary inclusion supports multi-platform Docker deployments without breaking existing functionality

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud