ci: use centralized vuln remediation workflow from infra

[ulziibay-kernel]

Replace per-repo workflow + prompt with a thin caller that invokes the reusable 3-stage pipeline (triage → fix → PR) in kernel/infra. Per-repo config in .github/vuln-remediation.json.

Made with Cursor

---

Note

Medium Risk
Adds an automated, scheduled GitHub Actions workflow with contents/pull-requests write permissions that executes a reusable workflow from kernel/infra, so misconfiguration or upstream workflow changes could affect repo contents via automated PRs.

Overview
Adds a new GitHub Actions workflow, vuln-remediation.yml, that runs on a weekly schedule or manually and delegates vulnerability triage/fix/PR creation to the reusable workflow in kernel/infra (passing go.mod as the Go version source) with repo write permissions.

Adds socket.yml with version: 2 to enable/configure Socket scanning tooling.

^{Reviewed by Cursor Bugbot for commit bc79593. Bugbot is set up for automated code reviews on this repo. Configure here.}