chore(ci): update CI/CD workflows and permissions (#5)

* chore(ci): maximize ci/cd values via dependabot and permissions

* fix(ci): Resolve workflow-linter self-matching and metadata issues

* fix(scorecard): enforce granular permissions and add fuzzing placeholder

* chore(floor-raise): add foundational tool integrations

Add AI manifest, Trustfile, Dustfile, and assail recipe as part of the
Floor Raise campaign to establish baseline tooling across all repos.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* docs: document consent pipeline

Describes the consent pipeline: intsoc-transactor (check/fix/submit) ->
consent-aware-http (consent middleware, planned) -> branch-newspaper
(publication platform). Documents what each component does and how they
connect.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

docs/PIPELINE.md

@@ -26,7 +26,7 @@ streams (IETF, IRTF, IAB, Independent Stream, IANA, RFC Editor).
 - Validates documents against per-stream requirements (idnits, metadata, SPDX)
 - Classifies fixes as AutoSafe, Recommended, or ManualOnly
 - Tracks document lifecycle with per-stream state machines (20+ states for IETF)
-- Provides CLI (`intsoc check/fix/submit/status/init`) and Gossamer desktop GUI
+- Provides CLI (`intsoc check/fix/submit/status/init`) and Tauri desktop GUI
 
 **Key crates:**
 - `intsoc-core` — domain model, state machines, validation framework