feat: security advisory aggregator, manifest API rewrite, namespace rename (#150, #283)

- Add `security:advisories` command — cross-repo CVE scanner via composer audit
  with checkpoint resumability, severity filtering, and auto-issue creation
- Rewrite `manifest:read` to use Gitea manifest API as primary source with
  auto-detection fallback from source tree (no more manifest.xml dependency)
- Rename MokoStandards namespace → MokoCli across all files
- Rename MokoEnterprise namespace → MokoCli across all files
- Rename MokoStandardsParser class → ManifestParser
- Fix composer.json autoload paths: src/ → source/

cli/create_project.php

@@ -19,7 +19,7 @@ declare(strict_types=1);
 
 require_once __DIR__ . '/../lib/Enterprise/CliFramework.php';
 
-use MokoEnterprise\CliFramework;
+use MokoCli\CliFramework;
 
 class CreateProjectCli extends CliFramework
 {
@@ -80,10 +80,10 @@ class CreateProjectCli extends CliFramework
             return 2;
         }
 
-        $config   = \MokoEnterprise\Config::load();
+        $config   = \MokoCli\Config::load();
         $platformName = $config->getString('platform', 'gitea');
         try {
-            $adapter = \MokoEnterprise\PlatformAdapterFactory::create($config);
+            $adapter = \MokoCli\PlatformAdapterFactory::create($config);
             $api     = $adapter->getApiClient();
         } catch (\Exception $e) {
             $this->log('ERROR', "Platform initialization failed: " . $e->getMessage());
@@ -205,7 +205,7 @@ class CreateProjectCli extends CliFramework
         return $data['data'] ?? [];
     }
 
-    private function restGet(string $path, string $token, ?\MokoEnterprise\ApiClient $apiClient = null): array
+    private function restGet(string $path, string $token, ?\MokoCli\ApiClient $apiClient = null): array
     {
         if ($apiClient !== null) {
             try {
@@ -217,7 +217,7 @@ class CreateProjectCli extends CliFramework
         return [];
     }
 
-    private function detectRepoPlatform(string $org, string $repo, string $token, ?\MokoEnterprise\ApiClient $apiClient = null): string
+    private function detectRepoPlatform(string $org, string $repo, string $token, ?\MokoCli\ApiClient $apiClient = null): string
     {
         foreach (['.github/.mokostandards', '.mokogitea/.mokostandards', '.mokostandards'] as $path) {
             $data = $this->restGet("repos/{$org}/{$repo}/contents/{$path}", $token, $apiClient);