chore: harden public repo with CI security checks

.github/workflows/dependency-review.yml

@@ -0,0 +1,17 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches: [ "main" ]
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-review:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
+        with:
+          fail-on-severity: moderate

.github/workflows/gitleaks.yml

@@ -0,0 +1,22 @@
+name: Gitleaks
+
+on:
+  pull_request:
+    branches: [ "main" ]
+  push:
+    branches: [ "main" ]
+
+permissions:
+  contents: read
+
+jobs:
+  gitleaks:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          fetch-depth: 0
+      - name: Gitleaks
+        uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

README.md

@@ -1,6 +1,6 @@
-# techbook-log
+# memetec.
 
-**memetec.** — 技術書の読書記録を管理するWebアプリ。
+技術書の読書記録を管理するWebアプリ。
 
 ---
 
@@ -54,7 +54,7 @@
 モノレポ構成。`api/` と `web/` の2パッケージ。
 
 ```
-techbook-log/
+memetec/
 ├── api/   # Hono on Cloudflare Workers
 └── web/   # Next.js（OpenNext）on Cloudflare Workers
 ```

web/orval.config.ts

@@ -2,7 +2,7 @@ import { defineConfig } from "orval";
 import "dotenv/config";
 
 export default defineConfig({
-  techbookLog: {
+  memetec: {
     output: {
       mode: "single",
       target: "./src/external/api.ts",