[ACT-001] GitHub Action v1 closure

[Hacks4Snacks]

Roadmap priority: P2

Goal: Close existing pass-through, test, and documentation gaps before adding drift/review modes.

• Add inputs for rules, ruleset, and suppression file.
• Build shell arrays from inputs without command-string evaluation.
• Exercise uses: ./ in CI against a locally built image; add pull/skip-pull support if needed.
• Update analysis-rules.md and deployment.md to lead with the first-party action.
• Upload HTML findings reports as an optional artifact.

Acceptance criteria:

• CI fails if action input wiring or action.yml execution regresses.
• A custom-rule and suppression fixture produces the same outcome via CLI and Action.

---

Source: docs/feature-feedback-assessment-2026-07.md