[Sync] Update project files from source repository (6f88bfd)

[mrz1836]

What Changed

• Updated CodeQL action references in .github/workflows/codeql-analysis.yml from commit 87557b9c84dde89fdd9b10e88954ac2f4248e463 (v4.36.1) to 8aad20d150bbac5944a9f9d289da16a4b0d87c1e (v4.36.2) across three steps: Initialize CodeQL, Autobuild, and Perform CodeQL Analysis
• Updated CodeQL action reference in .github/workflows/scorecard.yml from commit 87557b9c84dde89fdd9b10e88954ac2f4248e463 (v4.36.1) to 8aad20d150bbac5944a9f9d289da16a4b0d87c1e (v4.36.2) for the upload-sarif step
• Updated Codecov action in .github/workflows/fortress-coverage.yml from commit e79a6962e0d4c0c17b229090214935d2e33f8354 (v6.0.1) to fb8b3582c8e4def4969c97caa2f19720cb33a72f (v7.0.0)
• Modified .github/workflows/pull-request-management.yml with changes to content at line 776 (specific changes truncated in diff)

Why It Was Necessary

• Keeping GitHub Actions dependencies up to date ensures access to latest security patches and bug fixes in the CodeQL analysis tooling
• Upgrading Codecov action to v7.0.0 likely provides improved compatibility with newer Node.js versions and enhanced coverage reporting features
• Regular dependency updates reduce technical debt and minimize exposure to known vulnerabilities in CI/CD pipeline components

Testing Performed

• Verify that existing CI workflows continue to execute successfully with updated action versions
• Confirm CodeQL analysis completes without errors and produces expected security scanning results
• Validate that coverage reports are successfully uploaded to Codecov with the new v7.0.0 action version

Impact / Risk

• Low risk - These are patch version updates for CodeQL (v4.36.1 → v4.36.2) and actions are pinned to specific commit SHAs for security
• Moderate change for Codecov - Major version upgrade (v6.0.1 → v7.0.0) may introduce behavioral changes, though the configuration parameters remain unchanged in the diff
• No breaking changes expected - All workflow configurations maintain the same structure and parameters; any issues should surface immediately in CI pipeline execution

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This PR syncs GitHub Actions workflow files from the upstream source repository, primarily updating pinned action SHAs to newer releases to keep CI/security tooling current.

Changes:

• Bumped github/codeql-action pins from v4.36.1 to v4.36.2 in CodeQL and Scorecard workflows.
• Upgraded codecov/codecov-action from v6.0.1 to v7.0.0 for coverage uploads.
• Hardened fork PR labeling logic in pull-request-management.yml to avoid attempting to apply empty labels (422 guard).

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/codeql-analysis.yml	Updates CodeQL action pins to v4.36.2.
.github/workflows/scorecard.yml	Updates SARIF upload action pin to v4.36.2.
.github/workflows/fortress-coverage.yml	Upgrades Codecov action to v7.0.0 (pinned SHA).
.github/workflows/pull-request-management.yml	Improves robustness of fork/triage label application and normalizes jq default quoting.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[mrz1836]

LGTM!