[Sync] Update project files from source repository (6dcc4d5)

[mrz1836]

What Changed

• Added new configuration file t3.json with 11 predefined script commands for common development tasks (fix, test, lint, build, pre-commit, dependency management, and version bumping)
• Updated GitHub Actions runner from ubuntu-24.04 to ubuntu-26.04 across all workflow files (.github/workflows/*.yml), environment configuration (.github/env/00-core.env), action definitions (.github/actions/setup-redis-service/action.yml), and documentation (.github/tech-conventions/github-workflows.md)
• Upgraded GO_PRE_COMMIT_GOLANGCI_LINT_VERSION from v2.13.2 to v2.14.0 in .github/env/10-pre-commit.env
• Upgraded MAGE_X_VERSION from v1.27.2 to v1.27.3 and MAGE_X_GOLANGCI_LINT_VERSION from v2.13.2 to v2.14.0 in .github/env/10-mage-x.env
• Updated CodeQL GitHub Action from 1c5b675653bb5c22dbe9b12b556ec555138e09fd (v4.38.1) to 2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 (v4.38.2) in fortress-security-scans.yml, codeql-analysis.yml, and scorecard.yml
• Added new step in fortress-benchmarks.yml to redirect Go build temp directory from tmpfs /tmp to root disk on Linux runners to prevent "No space left on device" errors during benchmark binary compilation

Why It Was Necessary

• The t3.json configuration file provides a standardized interface for common development tasks, improving developer experience and workflow automation
• Ubuntu 26.04 runner migration ensures the CI/CD infrastructure uses the latest stable runner environment with updated tooling and security patches
• Tool version updates (golangci-lint, mage-x, CodeQL) provide bug fixes, performance improvements, and new features from upstream projects
• The benchmark temp directory fix addresses a critical issue where large cgo/sqlite test binaries overflow the small RAM-backed tmpfs on ubuntu-26.04, causing spurious build failures

Testing Performed

• File synchronization validates that all runner OS references are consistently updated across workflows, environment files, actions, and documentation
• Version pinning changes use exact commit SHAs for GitHub Actions to ensure reproducible builds and security verification
• The benchmark temp directory workaround includes inline documentation explaining the root cause and solution, with df commands to verify disk space availability
• Tool version updates follow semantic versioning and are tested through the existing CI/CD pipeline that uses these versions

Impact / Risk

• Low risk - Runner OS migration is transparent to most workflows; ubuntu-26.04 is a stable GitHub Actions runner image
• Medium impact - The benchmark temp directory fix prevents spurious failures and enables complete package coverage in benchmark runs
• No breaking changes - All updates maintain backward compatibility; t3.json is an additive configuration file
• Performance improvement - Newer tool versions and the temp directory fix on root disk improve benchmark reliability and execution speed

[Copilot]

Copilot review overview

🟡 Changes recommended

The CodeQL runner migration is incomplete, and benchmark documentation contains source-specific claims that do not apply here.

Review effort: Balanced
Findings: 1 · 1

Open (2)

• Pin the analyze job to Ubuntu 26.04 · New
• Remove inaccurate source-specific package claims · New

What changed in this PR

Updates developer tooling and migrates CI infrastructure to Ubuntu 26.04.

Changes:

• Adds T3 Code development commands.
• Upgrades CI runners, CodeQL, golangci-lint, and MAGE-X.
• Redirects benchmark temporary files away from /tmp.

File	Description
t3.json	Adds common development scripts.
.github/​workflows/​sync-labels.yml	Migrates label jobs to Ubuntu 26.04.
.github/​workflows/​stale-check.yml	Migrates stale processing runner.
.github/​workflows/​scorecard.yml	Updates runner and CodeQL upload action.
.github/​workflows/​pull-request-management.yml	Migrates PR management runners.
.github/​workflows/​fortress.yml	Updates orchestration runner defaults.
.github/​workflows/​fortress-test-matrix.yml	Pins matrix validation to Ubuntu 26.04.
.github/​workflows/​fortress-setup-config.yml	Updates setup runner configuration.
.github/​workflows/​fortress-security-scans.yml	Upgrades CodeQL SARIF upload.
.github/​workflows/​fortress-benchmarks.yml	Redirects benchmark temporary storage.
.github/​workflows/​dependabot-auto-merge.yml	Migrates Dependabot runner.
.github/​workflows/​codeql-analysis.yml	Upgrades CodeQL actions.
.github/​workflows/​auto-merge-on-approval.yml	Migrates auto-merge runner.
.github/​tech-conventions/​github-workflows.md	Documents Ubuntu 26.04 usage.
.github/​env/​10-pre-commit.env	Upgrades golangci-lint.
.github/​env/​10-mage-x.env	Upgrades MAGE-X tooling.
.github/​env/​00-core.env	Changes default runners.
.github/​actions/​setup-redis-service/​action.yml	Updates Redis cache-key runner default.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[mrz1836]

LGTM!