chore: update CLA contributor check workflow (enforce mode) [skip ci]

Author: tdaly-mifos

.github/workflows/cla-check.yml

@@ -54,23 +54,21 @@ jobs:
                 issue_number: context.payload.pull_request.number,
                 body:
                   `👋 Hi @${author} — thank you for your pull request.\n\n` +
-                  `**Note:** We do not have a Contributor License Agreement (CLA) on file for your GitHub account. ` +
-                  `Merging is **not blocked** at this time — this repository is in a CLA grace period. ` +
-                  `However, a signed CLA will be required once enforcement is enabled.\n\n` +
-                  `To get your CLA on file:\n` +
+                  `**This PR is currently blocked** because we do not have a Contributor License Agreement (CLA) on file for your GitHub account.\n\n` +
+                  `To get unblocked:\n` +
                   `1. Complete the form at https://mifos.org/about-us/financial-legal/mifos-contributor-agreement\n` +
                   `2. Complete the CLA signing process\n` +
-                  `3. Once verified you will be added to the approved contributors list`
+                  `3. Once verified you will be added to the approved contributors list and this PR check will be cleared`
               });
               await github.rest.issues.addLabels({
                 owner: context.repo.owner,
                 repo: context.repo.repo,
                 issue_number: context.payload.pull_request.number,
                 labels: ['cla-required'],
               });
-              core.warning(
-                `@${author} is not a member of the 'contributors' or 'contracted-contributors' team — ` +
-                `CLA required (grace period active, merge not blocked).`
+              core.setFailed(
+                `@${author} is not a member of the 'contributors' or 'contracted-contributors' team. ` +
+                `CLA signature required before this PR can be merged.`
               );
             } else {
               console.log(`@${author} is verified via '${matchedTeam}' team ✓`);