Add public quality profiles

[stc93025mn]

Summary

• Add reusable TypeScript, Python, and metadata quality profiles.
• Give all profiles one stable Quality result.
• Replace the local metadata quality steps with the reusable metadata profile.
• Allow only the SHA-pinned public quality workflow through the public security boundary.
• Document the caller and profile requirements.

Reason

Public repositories cannot install the private @mnppi/quality package in untrusted pull request jobs. This workflow runs public tools without package credentials.

Validation

• github-actionlint
• zizmor --min-severity=medium --min-confidence=medium
• prettier --check .
• repomix
• git diff --check

This pull request stays in draft until the live workflow checks prove the metadata profile.