Share GitHub workflows

.changeset/shared-github-workflows.md

@@ -0,0 +1,5 @@
+---
+"@zemd/gha": major
+---
+
+Publish the CI, CodeQL, Scorecard and release pipelines as reusable `shared-*.yml` workflows that other monorepos call by pinned SHA, and move the release tooling into this typed, tested package whose bundle is committed to `.github/scripts`.

.gitattributes

@@ -1 +1,4 @@
 * text=auto eol=lf
+
+# Built from internal/gha, collapsed in pull request diffs.
+.github/scripts/*.mjs linguist-generated=true

.github/CODEOWNERS

@@ -1 +1,6 @@
 * @zemd
+
+# Consumed by other repositories through `uses: zemd/js/.github/workflows/shared-*.yml@<sha>`.
+/.github/workflows/shared-*.yml @zemd
+/.github/scripts/ @zemd
+/internal/gha/ @zemd

.github/dependabot.yml

@@ -10,6 +10,7 @@ updates:
       - "/"
       - "/packages/*"
       - "/http-clients/*"
+      - "/internal/*"
     schedule:
       interval: "weekly"
     versioning-strategy: "increase" # the workspace pins exact versions (saveExact)