v0.1.3

[0.1.3] - Action rename + Code Scanning cleanup

Changed

• Renamed the Marketplace Action to "Egret Security Action" (was "Egret
  Security"), so the Action is distinguished from the Egret Security App by tool
  type. Reference it unchanged as NX1X/Egret@v0 or a pinned @v0.1.3.
• Dogfood: our own CI test suites now run under the Egret Action in audit
  mode, so CI monitors the egress/exec/file behaviour of the toolchain and
  dependency code during the tests (audit never blocks the build).

Security

• Closed all CodeQL go/incorrect-integer-conversion findings in the
  block-mode credential path: build uid/gid are parsed as bounded 32-bit values
  and carried as uint32 end to end, with no unchecked int narrowing.
• Scoped the self-test App installation token to least privilege
  (checks / issues / pull-requests write, contents read) instead of the App's
  blanket installation permissions (zizmor github-app).
• Removed step-output template injection in the self-test enforcement
  assertion by passing step outputs through env (zizmor template-injection).