Repository navigation

ci: vendor validation scripts and remove remote action pins #422

Job	Run time
Validate A2ML manifests	45s
Groove manifest check	10s
Validate K9 contracts	7s
Empty-linter (invisible characters)	33s
Dogfooding compliance summary	7s
	1m 42s