[Sync] Update project files from source repository (b318071)

[mrz1836]

What Changed

• Updated MAGE_X_VERSION from v1.12.2 to v1.13.0 in .github/.env.base
• Replaced real CVE identifiers with fake example CVEs in security scanning exclusion lists:
  • NANCY_EXCLUDES now uses CVE-9999-12345,CVE-9999-43210 (previously CVE-2024-38513,CVE-2023-45142)
  • MAGE_X_CVE_EXCLUDES now uses CVE-9999-12345,CVE-9999-43210 (previously CVE-2024-38513,CVE-2023-45142)
  • Updated associated comments to clarify these are fake examples
• Increased GO_BROADCAST_AI_MAX_TOKENS from 2000 to 5000
• Added commented debug configuration option GO_BROADCAST_DEBUG_DIFF_PATH with example path
• Added explicit contents: read permissions to three workflow files (dependabot-auto-merge.yml, stale-check.yml, sync-labels.yml) in their load-env jobs with explanatory comments

Why It Was Necessary

• Upgrading MAGE_X to v1.13.0 brings in latest tooling improvements and features
• Using fake CVE examples in the base configuration prevents accidental masking of real vulnerabilities and serves as clearer template documentation
• Increasing AI token limit allows for generation of more comprehensive content in broadcast operations
• Explicit permissions declarations follow GitHub Actions security best practices and improve workflow clarity

Testing Performed

• Verify MAGE_X v1.13.0 is available and compatible with existing workflows
• Confirm workflow YAML syntax is valid with added permissions blocks
• Test that environment variable loading still functions correctly in all three modified workflows
• Validate that CVE exclusion variables accept the new example format

Impact / Risk

• Low Risk: Version bump to MAGE_X v1.13.0 - tool updates typically maintain backward compatibility
• Low Risk: Removing real CVE exclusions from base config is safer - actual exclusions should be set in environment-specific overrides
• Low Risk: Permission additions are read-only and explicitly document existing requirements
• Medium Impact: Increased token limit may result in longer AI processing times and higher API costs

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud