Update Corgea scan skill for v1.10.0

[corgea-security]

Document named CI blocking-rule gates, CycloneDX SBOM generation, code-quality issue listing, and explicit project/repository selectors added in Corgea CLI v1.10.0. The skill now also reflects that --fail is deprecated and records the new flag constraints and aliases.

[leenk7991]

Closing this as superseded rather than merging or reworking it.

Two things happened after it was opened. #7 slimmed corgea-scan to a pointer: it now describes the stable shape of the CLI and defers to corgea --help for flags, because two copies of a flag matrix drift apart the moment a release lands. This PR is built on the pre-slim file and re-adds exactly the per-flag detail that change removed, so it conflicts and its premise no longer holds. It also targets v1.10.0, while v1.11.0 shipped on 16 August.

The prompt behind this flow still tells the model to read src/main.rs for the authoritative flag list, which is why the PR looks the way it does. That is being fixed so future releases produce edits that fit the pointer design instead.

One thing here is worth keeping and is not about flags: --include-image means the skill should now trigger on "scan this container image", and its description does not mention images at all. That belongs in the frontmatter description, and will be handled separately.