fix(action): rewrite GitHub Action as composite with pip installation

[shivasurya]

• Replace Docker-based action with faster composite action
• Use pip install codepathfinder for automatic binary installation
• Fix incorrect --ruleset flag to proper --rules flag
• Use scan command instead of deprecated ci command interface
• Add support for fail-on, verbose, skip-tests, python-version options
• Add results-file and version outputs for downstream steps
• Add example workflow at .github/workflows/example-security-scan.yml
• Add GitHub Action documentation to README.md
• Bump version to 1.1.7

Checklist:

• Tests passing (gradle testGo)?
• Lint passing (golangci-lint run this requires golangci-lint)?

[safedep]

SafeDep Report Summary

No dependency changes detected. Nothing to scan.

_{This report is generated by SafeDep Github App}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.24%. Comparing base (4bc4eb1) to head (838a989).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #465   +/-   ##
=======================================
  Coverage   80.24%   80.24%           
=======================================
  Files          99       99           
  Lines       10953    10953           
=======================================
  Hits         8789     8789           
  Misses       1813     1813           
  Partials      351      351           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[shivasurya]

Added Remote Ruleset Support

I've added support for the new remote ruleset feature to the GitHub Action:

Changes in this commit:

action.yml:

• ✅ Added ruleset input parameter for remote rulesets
• ✅ Made rules input optional (either rules or ruleset required)
• ✅ Updated "Python DSL" → "Python SDK" terminology
• ✅ Added validation to ensure at least one rule source is provided
• ✅ Support comma-separated multiple rulesets
• ✅ Properly handle both --rules and --ruleset flags

example-security-scan.yml:

• ✅ Replaced single example with 3 comprehensive examples:
  1. Python security scan with python/deserialization, python/django, python/flask
  2. Docker security scan with docker/security, docker/best-practice
  3. Custom local rules scan
• ✅ Updated python-dsl references to python-sdk

README.md:

• ✅ Updated GitHub Action section with remote ruleset examples
• ✅ Added "Available Remote Rulesets" section listing all available rulesets
• ✅ Added new ruleset parameter to inputs table
• ✅ Updated "Python DSL" to "Python SDK" throughout

Example Usage:

# Scan with remote Python rulesets
- uses: shivasurya/code-pathfinder@main
  with:
    ruleset: python/deserialization, python/django, python/flask
    fail-on: critical,high

# Scan with remote Docker rulesets  
- uses: shivasurya/code-pathfinder@main
  with:
    ruleset: docker/security, docker/best-practice

# Use local rules (backward compatible)
- uses: shivasurya/code-pathfinder@main
  with:
    rules: python-sdk/examples/owasp_top10.py

This enables users to leverage the new remote ruleset infrastructure from v1.2.0 🚀

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.