fix: CI pipeline failures blocking all merges (8 consecutive failures)

[zircote]

Quality Gate Reference

• Domain: CI/CD (80.9)
• Impact: Critical — blocks PR chore: quality improvement 53.9 → 81.5 (tier 2) #1 merge and all quality improvements
• Effort: Medium

Description

All 4 CI jobs (Lint, TypeCheck, Test, Security Scan) are failing on feat/autonomous-convergence across 8 consecutive runs. Dependabot runs on main are also failing. PR #1 cannot be merged, which means rollback workflow (CCD-008) and release improvements remain undeployed.

Evidence

• gh run list shows 8 consecutive failures (2026-03-21 to 2026-03-22)
• All 4 jobs fail: Lint & Format, Type Check, Test, Security Scan
• Dependabot update runs on main also failing

Acceptance Criteria

• All 4 CI jobs pass on feat/autonomous-convergence
• Dependabot runs succeed on main
• PR chore: quality improvement 53.9 → 81.5 (tier 2) #1 is mergeable

Cross-Domain Impact

Unblocks CCD-008 (rollback), GOV-003 (PR workflow), and release pipeline improvements.

[zircote]

Resolution: CI Pipeline Failures Fixed

All acceptance criteria met or superseded:

Evidence:

• feat/autonomous-convergence CI: All jobs passing since 2026-03-24 (run 23497458203)
• develop branch CI: All 5 jobs passing as of 2026-04-01 (run 23825587325) -- Lint, TypeCheck, Test, Security Scan, License Compliance
• PR 1: Closed (superseded by PR 22 on develop)
• CVEs fixed: pygments 2.20.0 (CVE-2026-4539), requests 2.33.0 (CVE-2026-25645) -- resolved in latest Security Scan
• Dependabot on main: Fails because .github/workflows/ does not exist on main yet -- will self-resolve when develop merges to main

The 8 consecutive CI failures were resolved by commit 2c1d55b and subsequent dependency updates.