Merge origin/main into fix/glama-license-tables-proof; resolve README conflict

main converged on a Markdown-only README (deleted README.adoc, rewrote
README.md — the Glama-crawler-driven clean-Markdown direction); the PR branch
had independently kept README.adoc and rewritten README.md.

Resolution:
- README.adoc: accept main's deletion (Markdown-only is the intended end state).
- README.md: take main's newer/fuller rewrite as the canonical body, with two fixes:
  * malformed licence badge URL `MPL_2.0--3.0--or--later` -> `MPL_2.0`
    (no such licence; `-or-later` is estate-banned).
  * header SPDX CC-BY-SA-4.0 -> MPL-2.0 (owner decision) to satisfy this repo's
    pre-commit hook (still strict MPL-2.0) and match the PR's "MPL-2.0 licensing"
    purpose. NB: the estate docs=CC-BY-SA split is not yet rolled into boj's hook.

OPEN (pending owner notes): main's README.md says "115 cartridges" / no 0.4.7,
vs the PR's reconciled 125 / 68 / 0.4.7. Left as main's values — owner to settle.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/build.yml

@@ -0,0 +1,28 @@
+# SPDX-License-Identifier: MPL-2.0
+# Copyright (c) 2026 Jonathan D.A. Jewell (hyperpolymath) <j.d.a.jewell@open.ac.uk>
+#
+# SonarQube Cloud (SonarCloud) static analysis. Generated from the SonarCloud
+# setup wizard; analysis scope + exclusions live in sonar-project.properties.
+# Requires the SONAR_TOKEN repository secret (Settings -> Secrets and variables
+# -> Actions). Project: https://sonarcloud.io/project/overview?id=hyperpolymath_boj-server
+name: Build
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize, reopened]
+permissions:
+  contents: read
+jobs:
+  sonarqube:
+    name: SonarQube
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
+      - name: SonarQube Scan
+        uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0
+        env:
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.well-known/security.txt

@@ -3,8 +3,7 @@
 # https://securitytxt.org/
 
 Contact: mailto:j.d.a.jewell@open.ac.uk
-Expires: 2026-12-31T23:59:59.000Z
+Expires: 2027-12-31T23:59:59.000Z
 Preferred-Languages: en
-Canonical: https://github.com/hyperpolymath/boj-server/.well-known/security.txt
+Canonical: https://boj-server.net/.well-known/security.txt
 Policy: https://github.com/hyperpolymath/boj-server/blob/main/SECURITY.md
-Hiring: https://github.com/hyperpolymath/boj-server/careers