Update GitHub Actions workflows to use shared actions

- Replaced direct action references with shared actions from the `settlemint` organization in both `codeql.yml` and `qa.yml`.
- Ensured consistency in the usage of parameters across the workflows.
- Updated comments for clarity and maintainability.

Author: roderik

.github/workflows/qa.yml

@@ -67,7 +67,7 @@ jobs:
         if: |
           github.event_name == 'pull_request' &&
           github.event.pull_request.draft == false
-        uses: settlemint/asset-tokenization-kit/.github/actions/build-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/build-status-labeler@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           workflow_status: "running"
@@ -77,7 +77,7 @@ jobs:
         if: |
           github.event_name == 'pull_request' &&
           github.event.pull_request.draft == false
-        uses: settlemint/asset-tokenization-kit/.github/actions/slack-pr-notifier@main
+        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}
@@ -90,7 +90,7 @@ jobs:
 
       # Setup dependencies for QA (skip for draft PRs)
       - name: Setup dependencies
-        uses: settlemint/asset-tokenization-kit/.github/actions/setup-dependencies@main
+        uses: settlemint/shared-actions/.github/actions/setup-dependencies@main
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           npm_token: ${{ env.NPM_TOKEN }}
@@ -135,9 +135,9 @@ jobs:
         with:
           commit_message: "chore(release): sync generated assets [skip ci]"
           branch: main
-          file_pattern: 'package.json README.md'
-          commit_user_name: 'SettleMint Release Bot'
-          commit_user_email: 'support@settlemint.com'
+          file_pattern: "package.json README.md"
+          commit_user_name: "SettleMint Release Bot"
+          commit_user_email: "support@settlemint.com"
         env:
           GITHUB_TOKEN: ${{ env.PAT_TOKEN }}
 
@@ -176,7 +176,7 @@ jobs:
           always() &&
           github.event_name == 'pull_request' &&
           steps.qa-tests.conclusion != 'skipped'
-        uses: settlemint/asset-tokenization-kit/.github/actions/build-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/build-status-labeler@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           workflow_status: ${{ steps.qa-tests.outcome == 'success' && 'success' || 'failure' }}
@@ -189,7 +189,7 @@ jobs:
         if: |
           github.event_name == 'pull_request' &&
           (github.event.action == 'opened' || github.event.action == 'synchronize')
-        uses: settlemint/asset-tokenization-kit/.github/actions/pr-labeler@main
+        uses: settlemint/shared-actions/.github/actions/pr-labeler@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}
@@ -201,7 +201,7 @@ jobs:
       - name: Run secret scanning
         id: secret-scan
         if: github.event_name == 'pull_request'
-        uses: settlemint/asset-tokenization-kit/.github/actions/secret-scanner@main
+        uses: settlemint/shared-actions/.github/actions/secret-scanner@main
         continue-on-error: true
 
       # Label secret scanning results (PR only)
@@ -210,7 +210,7 @@ jobs:
           always() &&
           github.event_name == 'pull_request' &&
           steps.secret-scan.conclusion != 'skipped'
-        uses: settlemint/asset-tokenization-kit/.github/actions/build-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/build-status-labeler@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           workflow_status:
@@ -223,7 +223,7 @@ jobs:
         if: |
           always() &&
           (github.event_name == 'pull_request' || github.event_name == 'pull_request_review')
-        uses: settlemint/asset-tokenization-kit/.github/actions/pr-review-check@main
+        uses: settlemint/shared-actions/.github/actions/pr-review-check@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_author: ${{ github.event.pull_request.user.login }}
@@ -237,7 +237,7 @@ jobs:
         if: |
           always() &&
           (github.event_name == 'pull_request' || github.event_name == 'pull_request_review')
-        uses: settlemint/asset-tokenization-kit/.github/actions/pr-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           is_draft: ${{ github.event.pull_request.draft }}
@@ -251,7 +251,7 @@ jobs:
           steps.label-final-status.conclusion == 'success' &&
           (github.event_name == 'pull_request' || github.event_name == 'pull_request_review') &&
           github.event.pull_request.draft == false
-        uses: settlemint/asset-tokenization-kit/.github/actions/slack-pr-notifier@main
+        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}
@@ -267,7 +267,7 @@ jobs:
         if: |
           always() &&
           (github.event_name == 'pull_request' || github.event_name == 'pull_request_review')
-        uses: settlemint/asset-tokenization-kit/.github/actions/auto-merge@main
+        uses: settlemint/shared-actions/.github/actions/auto-merge@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_author: ${{ github.event.pull_request.user.login }}
@@ -312,14 +312,14 @@ jobs:
           SLACK_CHANNEL_ID: op://platform/slack-bot/SLACK_CHANNEL_ID
 
       - name: Label PR as merged
-        uses: settlemint/asset-tokenization-kit/.github/actions/pr-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           is_draft: false
           is_merged: true
 
       - name: Update Slack notification for merged PR
-        uses: settlemint/asset-tokenization-kit/.github/actions/slack-pr-notifier@main
+        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}
@@ -366,14 +366,14 @@ jobs:
           SLACK_CHANNEL_ID: op://platform/slack-bot/SLACK_CHANNEL_ID
 
       - name: Label PR as abandoned
-        uses: settlemint/asset-tokenization-kit/.github/actions/pr-status-labeler@main
+        uses: settlemint/shared-actions/.github/actions/pr-status-labeler@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           is_draft: false
           is_abandoned: true
 
       - name: Update Slack notification for abandoned PR
-        uses: settlemint/asset-tokenization-kit/.github/actions/slack-pr-notifier@main
+        uses: settlemint/shared-actions/.github/actions/slack-pr-notifier@main
         with:
           pr_number: ${{ github.event.pull_request.number }}
           pr_title: ${{ github.event.pull_request.title }}