chore: audit repo

[PavelSBorisov]

Description:

1. Replace 3rd party action with a step-security maintained version
2. Introduce PR formatting workflow to enforce conventional commits

Related issue(s):

Part of audit #2310

Notes for reviewer:

Checklist

• Documented (Code comments, README, etc.)
• Tested (unit, integration, etc.)

[PavelSBorisov]

@hiero-ledger/hiero-sdk-java-maintainers, as part of the Release Engineering (GitHub Maintainers) team audits, we are proposing a workflow that enforces conventional commits in the project.
This change brings benefits for commit history, maintainability and ease of automation in the future if the repo release process is to be implemented with semantic release tooling that produces a semantic version release based on the conventional commit types.
Please review and let us know if this standard makes sense for your project and if your team is willing to adopt it.

[mustafauzunn]

./gradlew spotlessApply is needed

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{TIP This summary will be updated as you push new changes. Give us feedback}