feat: use our own actions in our workflows (#377)

* feat: use our own actions in our workflows

* fix: add missing inputs to validate-inputs, refactor node

* chore: cr comment fixes

* fix: update-validators formatting

* chore: update validators, add tests, conventions

* feat: validate severity with severity_enum

* feat: add 10 generic validators to improve input validation coverage

Add comprehensive validation system improvements across multiple phases:

Phase 2A - Quick Wins:
- Add multi_value_enum validator for 2-10 value enumerations
- Add exit_code_list validator for Unix/Linux exit codes (0-255)
- Refactor coverage_driver to use multi_value_enum

Phase 2B - High-Value Validators:
- Add key_value_list validator with shell injection prevention
- Add path_list validator with path traversal and glob support

Quick Wins - Additional Enums:
- Add network_mode validator for Docker network modes
- Add language_enum validator for language detection
- Add framework_mode validator for PHP framework modes
- Update boolean pattern to include 'push'

Phase 2C - Specialized Validators:
- Add json_format validator for JSON syntax validation
- Add cache_config validator for Docker BuildKit cache configs

Improvements:
- All validators include comprehensive security checks
- Pattern-based validation with clear error messages
- 23 new test methods with edge case coverage
- Update special case mappings for 20+ inputs
- Fix build-args mapping test expectation

Coverage impact: 22 actions now at 100% validation (88% → 92%)
Test suite: 762 → 785 tests (+23 tests, all passing)

* chore: regenerate rules.yml with improved validator coverage

Regenerate validation rules for all actions with new validators:

- compress-images: 86% → 100% (+1 input: ignore-paths)
- docker-build: 63% → 100% (+4 inputs: cache configs, platform-build-args)
- docker-publish: 73% → 100% (+1 input: build-args)
- language-version-detect: 67% → 100% (+1 input: language)
- php-tests: 89% (fixed framework→framework_mode mapping)
- prettier-lint: 86% → 100% (+2 inputs: file-pattern, plugins)
- security-scan: 86% (maintained coverage)

Overall: 23 of 25 actions now at 100% validation coverage (92%)

* fix: address PR #377 review comments

- Add | None type annotations to 6 optional parameters (PEP 604)
- Standardize injection pattern: remove @# from comma_separated_list validator
  (@ and # are not shell injection vectors, allows npm scoped packages)
- Remove dead code: unused value expression in key_value_list validator
- Update tests to reflect injection pattern changes

docker-build/rules.yml

@@ -2,7 +2,7 @@
 # Validation rules for docker-build action
 # Generated by update-validators.py v1.0.0 - DO NOT EDIT MANUALLY
 # Schema version: 1.0
-# Coverage: 63% (17/27 inputs)
+# Coverage: 100% (27/27 inputs)
 #
 # This file defines validation rules for the docker-build GitHub Action.
 # Rules are automatically applied by validate-inputs action when this
@@ -45,17 +45,27 @@ optional_inputs:
 conventions:
   architectures: docker_architectures
   auto-detect-platforms: docker_architectures
+  build-args: key_value_list
+  build-contexts: key_value_list
   buildkit-version: semantic_version
   buildx-version: semantic_version
-  cache-mode: boolean
+  cache-export: cache_config
+  cache-from: cache_config
+  cache-import: cache_config
+  cache-mode: cache_mode
+  context: file_path
   dockerfile: file_path
   dry-run: boolean
   image-name: docker_image_name
   max-retries: numeric_range_1_10
+  network: network_mode
   parallel-builds: numeric_range_0_16
+  platform-build-args: json_format
   platform-fallback: docker_architectures
-  sbom-format: report_format
+  push: boolean
+  sbom-format: sbom_format
   scan-image: boolean
+  secrets: key_value_list
   sign-image: boolean
   tag: docker_tag
   token: github_token
@@ -65,12 +75,12 @@ overrides:
   sbom-format: sbom_format
 statistics:
   total_inputs: 27
-  validated_inputs: 17
+  validated_inputs: 27
   skipped_inputs: 0
-  coverage_percentage: 63
-validation_coverage: 63
+  coverage_percentage: 100
+validation_coverage: 100
 auto_detected: true
-manual_review_required: true
+manual_review_required: false
 quality_indicators:
   has_required_inputs: true
   has_token_validation: true