chore: sync repository quality assets

[lightning-it-shared-assets-sync]

Automated sync from lightning-it/shared-assets-lit.

This PR updates:

• Lightning IT release-model metadata and documentation
• repository-quality workflow
• guarded Renovate automerge workflow and policy
• fail-closed Copilot review gate and review instructions
• trusted Codex-to-Copilot remediation workflow and prompt
• exact-head human or MLX-90 Security promotion authorization
• private-safe OpenSSF Scorecard workflow
• repository-quality validation scripts

This bootstrap PR targets develop. Once
develop exists and is protected, normal sync PRs target develop.

[lightning-it-shared-assets-sync]

{"app_id":4351516,"schema":"lit-shared-assets-sync-provenance/v2","source_job":"Sync repository-quality assets to documentation","source_repository":"lightning-it/shared-assets-lit","source_run_attempt":1,"source_run_id":32334601203,"source_run_url":"https://github.com/lightning-it/shared-assets-lit/actions/runs/32334601203","source_sha":"9ef12cb37a251f309bb7cd0c811de6b8c28bc301","source_workflow":".github/workflows/sync-repository-quality-repos.yml","target_base_sha":"7226abf68784090c60335929d1d3ed363f2f1dc4","target_head_sha":"34e9a67258d12ff3980cbb1e0e5646d7a371a1fd","target_pr":219,"target_repository":"lightning-it/documentation","target_tree_sha":"2478fc87a074ebd30db97e877d9a4ef0aa23457e"}

[lightning-it-shared-assets-sync]

Superseded by #220, the newer verified run-bound synchronization PR. The immutable source branch is retained as evidence.