chore: consolidate caller workflows into 4 grouped files

[CybotTM]

Summary

• Consolidates individual caller workflow files into 4 grouped files
• Groups workflows by trigger pattern for cleaner repo structure

New structure

File	Jobs	Trigger
ci.yml	CI, security, fuzz, license, CodeQL, scorecard, dep-review, PR quality, labeler	push + PR + weekly schedule
release.yml	Release, publish-to-TER, SLSA provenance	push tags v*
community.yml	Stale, lock, greetings	daily schedule + issues + PR
auto-merge-deps.yml	Auto-merge Dependabot/Renovate PRs	pull_request

All jobs call reusable workflows from netresearch/typo3-ci-workflows@main.

Design

See grouped-caller-workflows-design.md

[gemini-code-assist]

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

• .github/workflows/dependency-review.yml
• .github/workflows/scorecard.yml
• .github/workflows/slsa-provenance.yml

[github-actions]

Automated approval for solo maintainer project

This PR has passed all automated quality gates:

• ✅ Static analysis (PHPStan)
• ✅ Code style (PHP-CS-Fixer)
• ✅ Unit & functional tests
• ✅ Security scanning
• ✅ Dependency review

See SECURITY_CONTROLS.md for compensating controls documentation.