chore: lane greenup — README work-state, vite CVE, build, CI workflow fixes

.github/workflows/codeql.yml

@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   analyze:
-    name: Analyze Rust
+    name: Analyze
     runs-on: ubuntu-latest
     permissions:
       actions: read
@@ -24,17 +24,15 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a # v3
         with:
-          languages: rust
+          languages: python, typescript
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v4
+        uses: github/codeql-action/autobuild@ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a # v3
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
-        with:
-          category: "/language:rust"
+        uses: github/codeql-action/analyze@ce64ddcb0d8d890d2df4a9d1c04ff297367dea2a # v3

.github/workflows/trufflehog.yml

@@ -8,7 +8,7 @@ jobs:
   trufflehog:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
       - uses: trufflehog/actions/setup@main

README.md

@@ -1,3 +1,4 @@
+<!-- Work-state: alpha — [######----] 60% — core policy resolve/sync/host-rules green, lint+format debt open, vite CVE to land, CI workflows ubuntu-only -->
 # Policy scope stack for multi-harness AgentOps
 
 This folder contains a concrete policy scope model:

package.json

@@ -10,6 +10,6 @@
   },
   "overrides": {
     "esbuild": "^0.25.0",
-    "vite": "^6.4.2"
+    "vite": "^6.4.3"
   }
 }

pyproject.toml

@@ -7,6 +7,11 @@ name = "policy-federation"
 version = "0.1.0"
 description = "Agent policy federation"
 
+[tool.setuptools.packages.find]
+where = ["."]
+include = []
+namespaces = false
+
 [tool.ruff]
 line-length = 88
 target-version = "py310"