v0.7.0

Both workflows' logic now lives in TypeScript under src/, run by Node.js as is and checked by oxlint and knip. The catalog pick that turned 26.6.5 into 26.14.13 is fixed, CI scans the git history for committed secrets with gitleaks, and the trust boundary around the scripts checkout is documented and checked before the token steps.

Features

• Move the dashboard's steps to TypeScript and add oxlint and knip by @valuecodes in #22
• Move the update steps and the audit job to TypeScript by @valuecodes in #24
• Scan this repo's git history for committed secrets with gitleaks by @valuecodes in #25
• Document the trust boundary and check the scripts checkout before the token steps by @valuecodes in #26

Fixes

• Fix the catalog pick that turned 26.6.5 into 26.14.13 by @valuecodes in #23

Full Changelog: v0.6.2...v0.7.0