ci: use centralized vuln remediation workflow from infra

[ulziibay-kernel]

Replace per-repo workflow + prompt with a thin caller that invokes the reusable 3-stage pipeline (triage → fix → PR) in kernel/infra. Per-repo config in .github/vuln-remediation.json.

Made with Cursor

---

Note

Medium Risk
Medium risk because it introduces an automated workflow with contents/pull-requests write permissions and delegates execution to an external reusable workflow, which could affect repo automation behavior.

Overview
Adds a new scheduled/manual .github/workflows/vuln-remediation.yml that calls the centralized kernel/security-workflows reusable vulnerability remediation pipeline, passing server/go.mod for Go version detection and enabling Python setup.

Introduces socket.yml to configure Socket scanning ignore paths for shared/cdp-test/ and images/chromium-headful/client/.

^{Reviewed by Cursor Bugbot for commit 66c4c45. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 0b5bcf5. Configure here.}