chore: sync repository quality assets

[lightning-it-shared-assets-sync]

Automated sync from lightning-it/shared-assets-lit.

This PR updates:

• Lightning IT release-model metadata and documentation
• repository-quality workflow
• guarded Renovate automerge workflow and policy
• fail-closed Copilot review gate and review instructions
• trusted Codex-to-Copilot remediation workflow and prompt
• exact-head human or MLX-90 Security promotion authorization
• private-safe OpenSSF Scorecard workflow
• repository-quality validation scripts

This bootstrap PR targets develop. Once
develop exists and is protected, normal sync PRs target develop.

[lightning-it-shared-assets-sync]

{"app_id":4351516,"schema":"lit-shared-assets-sync-provenance/v2","source_job":"Sync repository-quality assets to documentation","source_repository":"lightning-it/shared-assets-lit","source_run_attempt":1,"source_run_id":32532497596,"source_run_url":"https://github.com/lightning-it/shared-assets-lit/actions/runs/32532497596","source_sha":"72fe7c8477e9aee6da6cbf55b8bf14743bb7097e","source_workflow":".github/workflows/sync-repository-quality-repos.yml","target_base_sha":"3fb703ed28fe915e3953ad895c6642321a5a0010","target_head_sha":"cdb2345c78c219e89f4cd98f084c24be06be7b51","target_pr":230,"target_repository":"lightning-it/documentation","target_tree_sha":"5488b02685d80d5b653bd63295c999357f0c4232"}

[lightning-it-shared-assets-sync]

Superseded by #231, the newer verified run-bound synchronization PR. The immutable source branch is retained as evidence.