ci(deps): bump github/codeql-action from 4.32.4 to 4.32.6 #162

	name: Security and Quality CI

	on:
	pull_request:
	types: [opened, synchronize, reopened, ready_for_review]
	workflow_dispatch: {}

	permissions:
	contents: read
	pull-requests: write

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	security-quality:
	runs-on: ubuntu-latest
	timeout-minutes: 15
	steps:
	- uses: actions/checkout@v6
	with:
	fetch-depth: 0

	- name: Set up uv
	uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7
	with:
	version: "latest"
	python-version: "3.12"
	enable-cache: true

	- name: Install dependencies
	run: \|
	echo "## 🔧 Installing dependencies" >> "$GITHUB_STEP_SUMMARY"
	uv lock
	make install
	echo "✅ Dependencies installed" >> "$GITHUB_STEP_SUMMARY"

	- name: Run validation
	run: \|
	echo "## 🔍 Validation Results" >> "$GITHUB_STEP_SUMMARY"
	make ai-checks
	echo "✅ All checks passed" >> "$GITHUB_STEP_SUMMARY"

	- name: Generate coverage and reports
	run: \|
	make test
	uv run bandit -r scripts src/ -ll -iii -f json -o bandit-report.json \|\| true
	uv run flake8 scripts src/ --max-line-length=120 > flake8-report.txt \|\| true

Provide feedback