test: validate vuln remediation Python support

[ulziibay-kernel]

Testing the reusable vuln-remediation workflow with setup-python: true on a Python-only repo.

Made with Cursor

---

Note

Low Risk
Adds a GitHub Actions workflow and minimal config only; risk is limited to CI behavior and automated PR creation/updates.

Overview
Introduces a scheduled/manual GitHub Actions workflow (.github/workflows/vuln-remediation.yml) that runs a reusable kernel/security-workflows vulnerability remediation job with Python setup enabled (Python 3.11) and permissions to open/update PRs.

Adds a minimal socket.yml (version 2) configuration file.

^{Reviewed by Cursor Bugbot for commit 784f10e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[firetiger-agent]

Firetiger deploy monitoring skipped

This PR didn't match the auto-monitor filter configured on your GitHub connection:

Any PR that changes the kernel API. Monitor changes to API endpoints (packages/api/cmd/api/) and Temporal workflows (packages/api/lib/temporal) in the kernel repo

Reason: PR modifies test files for vulnerability remediation workflow, not the kernel API endpoints or Temporal workflows specified in the filter.

To monitor this PR anyway, reply with @firetiger monitor this.