Codebase Observatory v0.3.1

Corrected workflow finding provenance

• ties GitHub Actions findings to exact changed lines
• distinguishes configuration present in an added workflow from modifications to an existing workflow
• uses neutral, range-based wording without attributing authorship
• includes change type, scope, and exact source-line evidence
• ignores unchanged workflow permissions when unrelated lines change

Validated against the historical 253-line workflow example and the full automated test suite.