GitHub Action adoption examples

[sairintechnologycom]

Add practical GitHub Action examples for teams adopting PkgSafe after GA.

Scope:

• Minimal scan example
• SARIF upload example
• Policy enforcement example
• Release verification or evidence generation example where appropriate
• Document expected permissions and failure behavior