ci(workflows): adopt standard-actions v1.5 reusable workflows and remove st-validate-local (#184)

Replace bespoke CI with v1.5 reusable workflows (ci-quality, ci-security, ci-release). Delete legacy validation scripts (lint.sh, test.sh, audit.sh). Bump publish workflow to v1.5. Fix yamllint violations in publish.yml and mkdocs.yml. Update CLAUDE.md to reference st-validate.

Co-authored-by: wphillipmoore-claude <255925739+wphillipmoore-claude@users.noreply.github.com>

Author: wphillipmoore

.github/workflows/ci.yml

@@ -1,38 +1,44 @@
-name: CI - Test and Validate
+name: CI
 
 on:
   pull_request:
+  workflow_call:
+    inputs:
+      run-security:
+        type: boolean
+        default: true
+      run-release:
+        type: boolean
+        default: true
 
 permissions:
   contents: read
-  security-events: write
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
-  security-and-standards:
-    uses: wphillipmoore/standard-actions/.github/workflows/ci-security.yml@v1.4
+  quality:
+    uses: wphillipmoore/standard-actions/.github/workflows/ci-quality.yml@v1.5
+    with:
+      language: shell
+      versions: '["latest"]'
+      container-suffix: base
+
+  security:
+    uses: wphillipmoore/standard-actions/.github/workflows/ci-security.yml@v1.5
+    with:
+      language: shell
+      run-codeql: false
+      run-standards: ${{ inputs.run-release || true }}
+      run-security: ${{ inputs.run-security || true }}
     permissions:
       contents: read
       security-events: write
+
+  release:
+    uses: wphillipmoore/standard-actions/.github/workflows/ci-release.yml@v1.5
     with:
       language: shell
-      run-codeql: 'false'
-
-  shellcheck:
-    name: "ci: shellcheck"
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v6
-
-      - name: Run shellcheck
-        run: |
-          files=$(find scripts -type f \( -name '*.sh' -o -path '*/git-hooks/*' \) | sort)
-          if [ -n "$files" ]; then
-            echo "$files" | xargs shellcheck
-          else
-            echo "No shell scripts found."
-          fi
+      run-release: ${{ inputs.run-release != false }}

.github/workflows/publish.yml

@@ -11,7 +11,8 @@ permissions:
 
 jobs:
   publish:
-    uses: wphillipmoore/standard-actions/.github/workflows/publish-release.yml@v1.4
+    # yamllint disable-line rule:line-length
+    uses: wphillipmoore/standard-actions/.github/workflows/publish-release.yml@v1.5
     permissions:
       contents: write
       pull-requests: write

CLAUDE.md

@@ -109,13 +109,13 @@ This is a documentation-only repository. There are no build or test commands.
 git config core.hooksPath ../standard-tooling/scripts/lib/git-hooks  # Enable git hooks
 ```
 
-Standard-tooling CLI tools (`st-commit`, `st-validate-local`, etc.) are
+Standard-tooling CLI tools (`st-commit`, `st-validate`, etc.) are
 pre-installed in the dev container images. No local setup required.
 
 ### Validation
 
 ```bash
-markdownlint .            # Lint all Markdown files
+st-docker-run -- st-validate   # Full validation (runs in dev container)
 ```
 
 ## Architecture

docs/site/mkdocs.yml

@@ -1,6 +1,8 @@
 site_name: mq-rest-admin-common
 site_url: https://wphillipmoore.github.io/mq-rest-admin-common/
-site_description: Shared documentation fragments and canonical mapping data for the mq-rest-admin project family
+site_description: >-
+  Shared documentation fragments and canonical mapping data
+  for the mq-rest-admin project family
 repo_url: https://github.com/wphillipmoore/mq-rest-admin-common
 repo_name: mq-rest-admin-common
 edit_uri: ""