docs(#243): replace enterprisecontract.dev URLs and GitHub org link

[fullsend-ai-coder]

Replace all enterprisecontract.dev documentation URLs with their conforma.dev equivalents, as the old domain is no longer accessible. Also update the GitHub organization link from enterprise-contract to conforma in slsa.adoc.

Changed files:

• hitchhikers-guide.adoc: 4 URL domain replacements
  (cli, policy authoring, policy input, configuration)
• custom-data.adoc: 2 URL domain replacements
  (release policy collections, ECC API reference)
• slsa.adoc: 1 GitHub org URL replacement

Intentionally retained references:

• enterprise-contract-service k8s namespace in custom-data.adoc
  (upstream not verified as renamed)
• verify-enterprise-contract Tekton task name in
  getting-started.adoc and
  reproducing-a-konflux-conforma-report.adoc
  (upstream task still uses this name)
• pipeline-enterprise-contract pipeline refs in
  getting-started.adoc (upstream still uses this name)
• Glossary entries documenting the former name

---

Closes #243

Post-script verification

• Branch is not main/master (agent/243-update-enterprise-contract-refs)
• Secret scan passed (gitleaks — 9de04efe4077fd68ab096fdbf529e8aabe966d55..HEAD)
• Pre-commit hooks passed (authoritative run on runner)
• Tests ran inside sandbox

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 12:30 PM UTC · Completed 12:34 PM UTC
Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

Review

Outcome: approve

Summary

This PR correctly replaces 6 stale enterprisecontract.dev documentation URLs with their conforma.dev equivalents across hitchhikers-guide.adoc (4) and custom-data.adoc (2), and updates the GitHub organization link in slsa.adoc from enterprise-contract to conforma. All replacements preserve the original URL paths — only the domain/org is changed.

The PR body clearly documents which enterprise-contract references were intentionally retained and why (upstream Kubernetes namespace, Tekton task names, and pipeline refs that genuinely still use the old naming). This aligns with the scope described in issue #243.

Verification

• Correctness: Each of the 7 line changes is a mechanical domain/org swap with no path alterations. The AsciiDoc link syntax is preserved correctly in all cases.
• Completeness: All enterprisecontract.dev URLs in the pages/ directory are covered. One additional enterprisecontract.dev reference exists in Makefile:3 (a build-script comment) that was not updated — see finding below.
• Security: No concerns. This is a documentation-only change with no executable code modifications.
• Scope: Well-scoped to the URL/org replacements requested in Update remaining enterprise-contract references after quay.io migration #243. The intentionally retained references are justified.

Findings

Severity	File	Description
low	Makefile	Line 3 contains a stale enterprisecontract.dev URL in a comment. Line 12 also references enterprise-contract.github.io while the actual repo variable on line 16 already uses conforma.github.io. Neither is user-facing, but updating them would complete the migration.

---

Labels: PR updates documentation URLs and org references