chore: OpenSSF workflows and compliance updates

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

justfile Justfilejustfile renamed to Justfile

@@ -64,3 +64,7 @@ deps:
 # Create compiled escript binary
 escript:
     mix escript.build
+
+# Run panic-attacker pre-commit scan
+assail:
+    @command -v panic-attack >/dev/null 2>&1 && panic-attack assail . || echo "panic-attack not found — install from https://github.com/hyperpolymath/panic-attacker"