chore(ci): add missing container-tag/container-suffix and fix stale standards doc (#309)

* chore(ci): add missing container-tag/container-suffix and fix stale standards doc

Add container-tag and container-suffix parameters to all reusable
workflow jobs (audit, quality, security, test, version) in ci.yml.
Fix repository-standards.md: correct git hooks path, rename st-submit-pr
to vrg-submit-pr, replace markdownlint requirement with vrg-docker-run,
remove stale --agent and --docs-only flags, fix --linkage default from
Fixes to Ref.

Addresses vergil-project/vergil-tooling#1015, vergil-project/vergil-tooling#1013

Co-Authored-By: Claude <noreply@anthropic.com>

* fix(ci): use base container suffix for common CI jobs

* fix(ci): revert container params and add VERSION file

Remove container-suffix/container-tag from ci.yml — workflow defaults are correct for Java repos. Add canonical VERSION file (1.2.2) for vrg-version.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): add container-suffix to audit and test jobs

The ci-audit and ci-test reusable workflows default container-suffix to base, which produces prod-base:<version> — an image that does not exist. Set container-suffix: java so these jobs use prod-java:<version>.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: wphillipmoore

.github/workflows/ci.yml

@@ -37,6 +37,7 @@ jobs:
     with:
       language: java
       versions: ${{ inputs.java-versions || '["17", "21"]' }}
+      container-suffix: java
 
   integration-tests:
     name: "test / integration / ${{ matrix.java-version }}"
@@ -103,6 +104,7 @@ jobs:
     with:
       language: java
       versions: ${{ inputs.java-versions || '["17", "21"]' }}
+      container-suffix: java
 
   version:
     uses: vergil-project/vergil-actions/.github/workflows/ci-version-bump.yml@v2.0

VERSION

@@ -0,0 +1 @@
+1.2.2

docs/repository-standards.md

@@ -14,7 +14,7 @@
 - Before modifying any files, check the current branch with `git status -sb`.
 - If on `develop`, create a short-lived `feature/*` branch or ask for explicit approval to proceed on `develop`.
 - If approval is granted to work on `develop`, call it out in the response and proceed only for that user-approved scope.
-- Enable repository git hooks before committing: `git config core.hooksPath scripts/git-hooks`.
+- Enable repository git hooks before committing: `git config core.hooksPath .githooks`.
 
 ## Local validation
 
@@ -46,7 +46,7 @@ Required for daily workflow:
 
 - Java 17+ (`brew install openjdk@17` or SDKMAN)
 - Maven Wrapper (`./mvnw`, checked into repo -- no separate Maven install needed)
-- `markdownlint` (required for docs validation and PR pre-submission)
+- `vrg-docker-run` (runs validation inside dev container)
 
 ## Merge strategy override
 
@@ -66,14 +66,13 @@ submission. Do not construct commit messages or PR bodies manually.
 
 ```bash
 vrg-commit \
-  --type TYPE --message MESSAGE --agent AGENT \
+  --type TYPE --message MESSAGE \
   [--scope SCOPE] [--body BODY]
 ```
 
 - `--type` (required): one of
   `feat|fix|docs|style|refactor|test|chore|ci|build`
 - `--message` (required): commit description
-- `--agent` (required): `claude` or `codex`
 - `--scope` (optional): conventional commit scope
 - `--body` (optional): detailed commit body
 
@@ -83,20 +82,19 @@ The script resolves the correct `Co-Authored-By` identity from
 ### Submitting PRs
 
 ```bash
-st-submit-pr \
+vrg-submit-pr \
   --issue NUMBER --summary TEXT \
   [--linkage KEYWORD] [--title TEXT] \
-  [--notes TEXT] [--docs-only] [--dry-run]
+  [--notes TEXT] [--dry-run]
 ```
 
 - `--issue` (required): GitHub issue number (just the number)
 - `--summary` (required): one-line PR summary
-- `--linkage` (optional, default: `Fixes`):
+- `--linkage` (optional, default: `Ref`):
   `Fixes|Closes|Resolves|Ref`
 - `--title` (optional): PR title (default: most recent commit
   subject)
 - `--notes` (optional): additional notes
-- `--docs-only` (optional): applies docs-only testing exception
 - `--dry-run` (optional): print generated PR without executing
 
 The script detects the target branch and merge strategy