fix: align CI tooling and MCP setup

[keito4]

Summary

• align MCP config with generated .mcp.json flow
• pin GitHub Actions versions and standardize Node version source
• update semantic-release and set Node 22.14.0 baseline
• document current upstream npm/tar advisory status

Testing

• npm run format:check
• npm run lint
• npm test

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR updates GitHub Actions versions across multiple workflows to recent patches, introduces node version sourcing via a dedicated .node-version file, adds workflow permissions blocks, and creates configuration files for editor settings and development environment setup.

Changes

Cohort / File(s)	Summary
Development Environment & Configuration .devcontainer/devcontainer.json, .editorconfig, .node-version	Adds VSCode extension for GitHub Actions, establishes project-wide editor formatting rules (LF line endings, UTF-8, final newline), and defines Node.js version centrally as "22".
Workflow Version Updates (Main) .github/workflows/ci.yml, .github/workflows/security.yml, .github/workflows/docker-image.yml, .github/workflows/manual-release.yml, .github/workflows/rebuild-docker-cache.yml	Bumps GitHub Actions versions (checkout v6.0.2, setup-node v6.1.0, upload-artifact v6.0.0, codecov-action v5.5.1, gitleaks-action v2.3.9), adds workflow-level and job-level permissions blocks (read access for contents, pull-requests, actions, checks), and switches Node version sourcing from hard-coded '22' to node-version-file: '.node-version'.
Workflow Version Updates (Individual Jobs) .github/workflows/claude-code-review.yml, .github/workflows/claude.yml, .github/workflows/container-security.yml, .github/workflows/test-act.yml, .github/workflows/update-libraries.yml	Updates checkout action to v6.0.2 and other action versions as needed; changes Node sourcing approach where applicable.
Workflow Template Updates .github/workflows/templates/README.md, .github/workflows/templates/monorepo-release.yml, .github/workflows/templates/tls-evidence.yml, .github/workflows/templates/unified-ci.yml, .github/workflows/templates/update-db-types.yml, .github/workflows/templates/zap-baseline.yml	Bumps GitHub Actions from v4 to v6.x versions (checkout v6.0.2, setup-node v6.1.0, upload-artifact v6.0.0) across all workflow templates, replacing major version pins with specific patch versions.
Documentation & Configuration README.md, script/README.md, mcp.json	Adds clarification notes in README about Claude Code configuration levels and a ShellCheck Coverage section documenting excluded scripts; deletes linear MCP server configuration from mcp.json.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Possibly related PRs

• fix: resolve code review findings and improve documentation consistency #202: Implements centralized Node.js version management via .node-version file and updates related configuration across devcontainer and workflows.
• feat: comprehensive CI/CD improvements #216: Updates GitHub Actions dependencies and switches setup-node to use node-version-file for consistent version sourcing.
• feat: プロジェクトの品質管理設定を追加 #70: Modifies developer environment setup and CI configuration including devcontainer and workflow files.

Suggested labels

released

Poem

🐰 Hops through the workflows with glee,
Versions pinned, precise as can be!
Node version centralized, configs align,
Permissions and templates now shine!
The burrow of code, now tidy and fine! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'fix: align CI tooling and MCP setup' directly relates to the main changes: pinning GitHub Actions versions across workflows, standardizing Node.js version sourcing via .node-version file, removing the mcp.json configuration, and adding repository-wide editor defaults.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

• 📝 Generate docstrings

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

🎉 This PR is included in version 1.59.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀