fix(security/compliance): standardized TruffleHog and RSR metadata

Author: hyperpolymath

.conflow.yaml

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: MPL-2.0
+// Owner: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # conflow pipeline - Full generate → validate → export
 version: "1"
 name: "phronesis"

.github/workflows/secret-scanner.yml

@@ -17,7 +17,7 @@ jobs:
   trufflehog:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
         with:
           fetch-depth: 0
       - name: TruffleHog Secret Scan

Justfile

@@ -1,4 +1,5 @@
 import? "contractile.just"
+// Owner: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 
 # SPDX-License-Identifier: MPL-2.0
 # SPDX-FileCopyrightText: 2025 Phronesis Contributors

deploy/kubernetes/statefulset.yaml

@@ -1,4 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
+// Owner: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # Kubernetes StatefulSet for Phronesis consensus cluster
 
 apiVersion: v1

docker-compose.yml

@@ -1,4 +1,5 @@
 # SPDX-License-Identifier: MPL-2.0
+// Owner: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # Docker Compose for Phronesis multi-node cluster
 
 version: '3.8'

syntax/linguist.yml

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: MPL-2.0
+// Owner: Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
 # GitHub Linguist language definition for Phronesis
 # Place this in .github/linguist.yml or submit to github/linguist