chore(ci): externalize workflow scripts and relocate main flow doc (#722)

* feat: Add GitHub Actions workflows for security audits, CodeQL analysis, contributor updates, performance benchmarks, integration tests, fuzz testing, and reusable Rust build jobs

- Implemented `sec-audit.yml` for Rust package security audits using `rustsec/audit-check` and `cargo-deny-action`.
- Created `sec-codeql.yml` for CodeQL analysis scheduled twice daily.
- Added `sync-contributors.yml` to update the NOTICE file with new contributors automatically.
- Introduced `test-benchmarks.yml` for performance benchmarks using Criterion.
- Established `test-e2e.yml` for running integration and end-to-end tests.
- Developed `test-fuzz.yml` for fuzz testing with configurable runtime.
- Created `test-rust-build.yml` as a reusable job for executing Rust commands with customizable parameters.
- Documented main branch delivery flows in `main-branch-flow.md` for clarity on CI/CD processes.

* ci(workflows): update workflow scripts and rename for clarity; remove obsolete lint feedback script

* chore(ci): externalize workflow scripts and relocate main flow doc

.github/workflows/sync-contributors.yml

@@ -0,0 +1,116 @@
+name: Update Contributors NOTICE
+
+on:
+  workflow_dispatch:
+  schedule:
+    # Run every Sunday at 00:00 UTC
+    - cron: '0 0 * * 0'
+
+concurrency:
+  group: update-notice-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update-notice:
+    name: Update NOTICE with new contributors
+    runs-on: blacksmith-2vcpu-ubuntu-2404
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+
+      - name: Fetch contributors
+        id: contributors
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          # Fetch all contributors (excluding bots)
+          gh api \
+            --paginate \
+            "repos/${{ github.repository }}/contributors" \
+            --jq '.[] | select(.type != "Bot") | .login' > /tmp/contributors_raw.txt
+
+          # Sort alphabetically and filter
+          sort -f < /tmp/contributors_raw.txt > contributors.txt
+
+          # Count contributors
+          count=$(wc -l < contributors.txt | tr -d ' ')
+          echo "count=$count" >> "$GITHUB_OUTPUT"
+
+      - name: Generate new NOTICE file
+        run: |
+          cat > NOTICE << 'EOF'
+          ZeroClaw
+          Copyright 2025 ZeroClaw Labs
+
+          This product includes software developed at ZeroClaw Labs (https://github.com/zeroclaw-labs).
+
+          Contributors
+          ============
+
+          The following individuals have contributed to ZeroClaw:
+
+          EOF
+
+          # Append contributors in alphabetical order
+          sed 's/^/- /' contributors.txt >> NOTICE
+
+          # Add third-party dependencies section
+          cat >> NOTICE << 'EOF'
+
+
+          Third-Party Dependencies
+          =========================
+
+          This project uses the following third-party libraries and components,
+          each licensed under their respective terms:
+
+          See Cargo.lock for a complete list of dependencies and their licenses.
+          EOF
+
+      - name: Check if NOTICE changed
+        id: check_diff
+        run: |
+          if git diff --quiet NOTICE; then
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Create Pull Request
+        if: steps.check_diff.outputs.changed == 'true'
+        env:
+          GH_TOKEN: ${{ github.token }}
+          COUNT: ${{ steps.contributors.outputs.count }}
+        run: |
+          branch_name="auto/update-notice-$(date +%Y%m%d)"
+
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+
+          git checkout -b "$branch_name"
+          git add NOTICE
+          git commit -m "chore(notice): update contributor list"
+          git push origin "$branch_name"
+
+          gh pr create \
+            --title "chore(notice): update contributor list" \
+            --body "Auto-generated update to NOTICE file with $COUNT contributors." \
+            --label "chore" \
+            --label "docs" \
+            --draft || true
+
+      - name: Summary
+        run: |
+          echo "## NOTICE Update Results" >> "$GITHUB_STEP_SUMMARY"
+          echo "" >> "$GITHUB_STEP_SUMMARY"
+          if [ "${{ steps.check_diff.outputs.changed }}" = "true" ]; then
+            echo "✅ PR created to update NOTICE" >> "$GITHUB_STEP_SUMMARY"
+          else
+            echo "✓ NOTICE file is up to date" >> "$GITHUB_STEP_SUMMARY"
+          fi
+          echo "" >> "$GITHUB_STEP_SUMMARY"
+          echo "**Contributors:** ${{ steps.contributors.outputs.count }}" >> "$GITHUB_STEP_SUMMARY"