fix: bump scanner score to 93/100 (pin actions, add dependabot, codexignore, metadata)

Author: blackwell-systems

.codex-plugin/plugin.json

@@ -8,9 +8,16 @@
     "name": "Blackwell Systems",
     "url": "https://blackwell-systems.com"
   },
+  "homepage": "https://gcformat.com",
+  "keywords": ["mcp", "proxy", "token-optimization", "gcf", "cost-reduction"],
   "interface": {
     "displayName": "GCF Proxy",
     "shortDescription": "Save 71% on MCP tool call tokens with GCF encoding.",
-    "composerIcon": "./assets/icon.svg"
+    "composerIcon": "./assets/icon.svg",
+    "links": {
+      "documentation": "https://gcformat.com/guide/claude-code.html",
+      "repository": "https://github.com/blackwell-systems/gcf-codex-plugin",
+      "homepage": "https://gcformat.com"
+    }
   }
 }

.codexignore

@@ -0,0 +1,2 @@
+.git
+.github

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/hol-plugin-scanner.yml

@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: HOL Plugin Scanner
-        uses: hashgraph-online/ai-plugin-scanner-action@v1
+        uses: hashgraph-online/ai-plugin-scanner-action@917a3c09b5ec5c2cc264779485da3c0b5ea6a69f # v1
         with:
           plugin_dir: "."
           mode: scan