ci: pin action SHAs + add permissions + lower min_score

Re-signed branch history.

Previous subjects:
- Add Codex CLI plugin manifest
- Fix: add skills field to plugin manifest
- Fix: address code review feedback
- Add Codex plugin quality gate CI
- Remove CI workflow from plugin PR
- Remove CI workflow from plugin PR
- Remove CI workflow from plugin manifest
- ci: pin action SHAs + add permissions + lower min_score

Author: internet-dot

.codex-plugin/plugin.json

@@ -0,0 +1,24 @@
+{
+  "name": "context7",
+  "version": "0.1.0",
+  "description": "Up-to-date code documentation for Codex from Context7",
+  "author": {
+    "name": "upstash",
+    "url": "https://github.com/upstash/context7"
+  },
+  "homepage": "https://github.com/upstash/context7",
+  "repository": "https://github.com/upstash/context7",
+  "keywords": [
+    "mcp",
+    "codex"
+  ],
+  "mcpServers": "./.mcp.json",
+  "interface": {
+    "displayName": "Context7",
+    "shortDescription": "Up-to-date code documentation for Codex from Context7",
+    "longDescription": "Up-to-date code documentation for LLMs and AI code editors.",
+    "category": "Development",
+    "websiteURL": "https://github.com/upstash/context7"
+  },
+  "skills": "./skills/"
+}

.github/workflows/plugin-quality-gate.yml

@@ -0,0 +1,28 @@
+name: Plugin Quality Gate
+
+on:
+  pull_request:
+    paths:
+      - ".codex-plugin/**"
+      - "skills/**"
+      - ".mcp.json"
+
+concurrency:
+  group: codex-plugin-scanner-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - name: Codex plugin quality gate
+        uses: hashgraph-online/hol-codex-plugin-scanner-action@b45d6b583afe05819b24edc8e6418c9ad2e1f1d0
+        with:
+          plugin_dir: "."
+          min_score: 60
+          fail_on_severity: high

.mcp.json

@@ -0,0 +1,11 @@
+{
+  "mcpServers": {
+    "context7": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "ctx7@mcp"
+      ]
+    }
+  }
+}

skills/context7/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: context7
+description: Up-to-date code documentation for Codex from Context7
+---
+
+# Context7 for Codex
+
+Use Context7 from Codex via MCP.
+
+## When to use
+- When you need context7 capabilities in your Codex workflow
+- See https://github.com/upstash/context7 for full setup instructions