production-ready: pin actions to hashes, add worker, automerge, security

- Pin all GitHub Actions to commit hashes (checkout@v4.2.2, github-script@v7.0.1,
  add-to-project@v1.0.2, wrangler-action@v3.14.0, automerge-action@v0.16.4)
- Add real CI pipeline: HTML validation, JSON validation, shell script syntax,
  CLI tool checks, security scanning for secrets
- Replace shared deploy action with direct wrangler-action for Cloudflare Pages
- Add Cloudflare Worker (worker.js) with API endpoints: /api/health,
  /api/identity, /api/status, /api/tasks for long-running task orchestration
- Add automerge workflow (squash merge on 'automerge' label)
- Add dependabot for weekly GitHub Actions updates
- Add CODEOWNERS for review enforcement
- Fix identity JSON: restore missing $ in dollar amounts, bump version to 2.0.0
- Update wrangler.toml with worker entry point and compatibility_date 2024-12-01
- Rewrite README: verified status table at top, API docs, pinned action table,
  correct directory structure, functional code examples
- Add proper permissions blocks to all workflows
- Improve failure-issue.yml with branch info and structured body

https://claude.ai/code/session_016SMnn8BH6h4hK4UtgPnpcj

website/wrangler.toml

@@ -1,2 +1,12 @@
 name = "aria-blackroad-me"
-compatibility_date = "2024-01-01"
+main = "worker.js"
+compatibility_date = "2024-12-01"
+compatibility_flags = ["nodejs_compat"]
+
+[site]
+bucket = "."
+
+# Production environment
+[env.production]
+name = "aria-blackroad-me"
+routes = []