chore(tooling): refresh managed config to current Vergil tooling/actions

[wphillipmoore-vergil-agent]

Refresh checked-in managed config to current Vergil tooling (v2.0.76) / actions (v2.0.26), per epic mq-rest-admin-project/.github#14. Live audit: item 1 (marketplace -> vergil-claude-plugin), item 3 (canonical CLAUDE.md template), item 6 (.vergil/ gitignore), item 7 (cd.yml secrets: inherit). Hook guard (item 2) already landed via #312. Also drive to green any CodeQL/Semgrep findings the updated scanner rulesets surface (mirrors go/rust/python). Acceptance: audit COMPLIANT, vrg-validate green, PR mergeStateStatus CLEAN, post-merge CD docs green.

[wphillipmoore-vergil-agent]

Closed after finalization. Config refresh (items 1/3/6/7) + the CodeQL java/relative-path-command fix (/bin/bash in MqRestSessionIT) merged in PR #314; develop at f7e5ea6. audit COMPLIANT, vrg-validate green, PR was CLEAN. Verified post-merge: develop cd.yml run succeeded (docs deployed). The earlier 'unit test' red was a transient maven-central resolution flake, cleared on retrigger.