chore(ci): bump catalog to v2.5.0 + container-scan-summary + Code-Quality

Andrew Dunnrequested to merge
andunn-catalog-v2.5.0 into main

Bump 31 catalog refs to @v2.5.0 (SBOM ingestion). Adopt container-scan-summary for LLM-pasteable CVE triage. Add Code-Quality template.

Merge request reports