docs/ci: README Quality & Security; add CodeQL; add .clang-format; add PRERELEASE (optional build.yml upgrade)

Author: sammyhegab

,clang-format

@@ -28,7 +28,6 @@ jobs:
         if: runner.os == 'Windows'
         run: choco install ninja --no-progress
 
-      # macOS generally has cmake; ensure zip is present
       - name: Ensure zip (macOS)
         if: runner.os == 'macOS'
         run: |
@@ -99,4 +98,4 @@ jobs:
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
         with:
-          files: artifacts/**/*
+          files: artifacts/**/*

.github/workflows/build.yml

@@ -5,10 +5,10 @@ _Date: 2025-09-23_
 
 ## Summary
 This pre-release focuses on developer experience and packaging:
-- Convenience PowerShell tooling under `tools/` (`build.ps1`, `pack.ps1`, `install.ps1`, `uninstall.ps1`, `make.ps1`).
+- PowerShell tooling under `tools/` (`build.ps1`, `pack.ps1`, `install.ps1`, `uninstall.ps1`, `make.ps1`).
 - Visual Studio builds in a separate `build-vs` folder.
-- CI now uploads **raw binaries and zipped artefacts** per OS.
-- Repository hygiene and docs: updated README, CHANGELOG, CONTRIBUTING, SECURITY, issue templates.
+- CI uploads **raw binaries and zipped artefacts** per OS.
+- Repository hygiene and docs: updated README, CONTRIBUTING, SECURITY, issue templates.
 - Optional style guard via `.clang-format` (LLVM base).
 
 ## Highlights
@@ -65,11 +65,9 @@ powershell -ExecutionPolicy Bypass -File .\tools\pack.ps1 -InstallToUserBin
    ```
 
 ## Checksums
-The CI job will attach `.zip` artefacts. Compute checksums locally (example on Windows PowerShell):
+Compute checksums locally (example on Windows PowerShell):
 ```powershell
 Get-FileHash .\dist\uaengine-windows.zip -Algorithm SHA256
 ```
 
----
-
 Thanks for testing! Please file issues with logs and your OS/compiler details.

PRERELEASE.md

@@ -204,14 +204,14 @@ Artifacts are uploaded per job. On tag pushes, a GitHub Release is created and a
 
 Workflow file: `.github/workflows/build.yml`.
 
-> Tip: If you want zipped artifacts with neat names (`uaengine-windows.zip`, etc.), add a final “zip + upload” step in the workflow.
-
----
 ### Quality & Security
 - **Code scanning:** This repo runs **CodeQL** on pushes, PRs, and weekly. See the *CodeQL* workflow in Actions.
-- **Formatting:** We ship a `.clang-format` (LLVM base, 2‑space indents, Allman). To format locally:
+- **Formatting:** We ship a `.clang-format` (LLVM base, 2-space indents, Allman). To format locally:
   - **Windows (if installed):** `clang-format -i $(git ls-files *.c *.h)` (PowerShell may need a loop)
   - **Linux/macOS:** `git ls-files '*.c' '*.h' | xargs clang-format -i`
+
+---
+
 ## Versioning & Releases
 
 - The CLI reports its version via `--version` (string lives in `include/ueng/version.h`).