Merge pull request #11 from step-security/dependabot/bundler/test/using_bundler/rexml-3.4.2

build(deps): bump rexml from 3.3.9 to 3.4.2 in /test/using_bundler

Merge pull request #4 from step-security-bot/chore/GHA-090545-stepsecurity-remediation

[StepSecurity] Apply security best practices

Merge pull request #2 from step-security/release

fix: addressed review comments and ai analysis

fix: removed comments from release workflow

feat: initial release

Merge pull request #1 from step-security/ci/claude

ci: added claude review workflow

Initial commit