ci: add centralized vuln remediation workflow

[ulziibay-kernel]

Thin caller to the reusable 3-stage pipeline (triage → fix → PR) in kernel/infra. Per-repo config in .github/vuln-remediation.json.

Made with Cursor

---

Note

Low Risk
Low risk: adds a scheduled/manual GitHub Actions workflow that delegates vulnerability remediation to an external reusable workflow; no runtime application code changes.

Overview
Adds a new GitHub Actions workflow, vuln-remediation.yml, that runs on a weekly schedule (and via manual dispatch) and delegates to the reusable kernel/infra vulnerability remediation pipeline with go.mod as the Go version source.

Adds a minimal socket.yml (version: 2) to enable Socket configuration.

^{Reviewed by Cursor Bugbot for commit 5089e4b. Bugbot is set up for automated code reviews on this repo. Configure here.}