ci: add centralized vuln remediation workflow

[ulziibay-kernel]

Thin caller to the reusable 3-stage pipeline (triage → fix → PR) in kernel/infra. Per-repo config in .github/vuln-remediation.json.

Made with Cursor

---

Note

Medium Risk
Adds a scheduled GitHub Actions workflow with contents/pull-requests write permissions that can open PRs automatically, so misconfiguration could create unwanted changes but it’s confined to CI automation.

Overview
Introduces a new scheduled/dispatchable GitHub Actions workflow (.github/workflows/vuln-remediation.yml) that delegates vulnerability triage→fix→PR creation to the centralized reusable pipeline in kernel/security-workflows (with setup-bun enabled) and runs with repository write permissions to open remediation PRs.

^{Reviewed by Cursor Bugbot for commit 5d5753a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mcp	Ready	Preview, Comment	May 12, 2026 5:26pm

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 3f22641. Configure here.}