feat: GSD Go-native — replaces 8 npm GSD skills + absorb skill-code-p… #562

	# Purpose: Lint and security scanning (golangci-lint, govulncheck, gosec).
	# n8n-delegated per mandate M1 (see AGENTS.md §M1).
	# Heavy scanning runs on the OCI free-tier VM via n8n. The only runner-side
	# work is a lightweight `go vet` pre-check (~2s). SARIF upload is handled
	# by the n8n side via the GitHub API.
	name: lint-and-security

	on:
	push:
	branches: [main]
	pull_request:
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: lint-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	delegate:
	name: Delegate lint & security to n8n
	runs-on: ubuntu-latest
	timeout-minutes: 2
	steps:
	- uses: actions/checkout@v7
	- uses: actions/setup-go@v6
	with:
	go-version-file: go.mod
	- name: Trigger n8n webhook
	env:
	N8N_CI_WEBHOOK_URL: ${{ secrets.N8N_CI_WEBHOOK_URL }}
	run: \|
	if [[ -z "$N8N_CI_WEBHOOK_URL" ]]; then
	echo "::error::N8N_CI_WEBHOOK_URL secret is not configured"
	exit 1
	fi
	curl -fsS -X POST \
	-H "Content-Type: application/json" \
	-d "{\"workflow\":\"lint-and-security\",\"ref\":\"${{ github.ref }}\",\"sha\":\"${{ github.sha }}\",\"repo\":\"${{ github.repository }}\",\"actor\":\"${{ github.actor }}\"}" \
	"$N8N_CI_WEBHOOK_URL"
	- name: Local pre-check (go vet)
	run: \|
	go version
	go vet ./...
	echo "Heavy lint/security scanning delegated to n8n."

Provide feedback