fix: incorporate cuioss organization settings and workflows

[cuioss-oliver]

Summary

• Replaced inline GitHub Actions workflows with reusable workflow callers from cuioss-organization
• Updated project.yml to new nested schema (release, maven-build, sonar, pages sections)
• Removed duplicate community health files inherited from org-level cuioss/.github
• Cleaned up repo-level secrets now inherited from organization

Changes Applied

• verify-org-integration: Deleted 6 repo-level secrets (GPG_, OSS_SONATYPE_, PAGES_DEPLOY_TOKEN, SONAR_TOKEN), removed CODE_OF_CONDUCT.md and SECURITY.md
• apply-repo-settings: Disabled discussions, enabled delete-branch-on-merge, set squash commit format to PR_TITLE/PR_BODY, enabled dependabot alerts and vulnerability reporting
• update-github-actions: Replaced maven.yml (110→26 lines), replaced scorecards.yml (82→24 lines), replaced dependency-review.yml (28→16 lines), renamed maven-release.yml to release.yml (86→27 lines), updated project.yml schema
• apply-branch-protection: Created main-branch-protection ruleset with build + sonar-build checks, cuioss-release-bot bypass

Test plan

• Maven Build workflow triggers and passes on this PR
• Sonar analysis runs successfully
• Dependency review check runs on PR
• Verify project.yml is correctly parsed by reusable workflows

🤖 Generated with Claude Code