✨ feat(workflows): aggiungi check pacchetti obsoleti e migliora audit sicurezza

- aggiungi workflow separato per controllo dipendenze obsolete
- aggiorna maintenance.yml per distinguere tra audit sicurezza e check obsolete
- aggiorna nomi e struttura dei job per maggiore chiarezza
- carica artifact Android con nome versione dinamico
- separa issue sicurezza da quelle di pacchetti obsoleti in CI
- migliora trigger per job di manutenzione periodica【workflows】

.gitea/workflows/dependency-check.yml

@@ -1,4 +1,4 @@
-name: Dependency Check
+name: Dependency Audit
 
 on:
   workflow_call:
@@ -9,7 +9,7 @@ on:
   workflow_dispatch:
 
 jobs:
-  dependency-check:
+  dependency-audit:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -43,35 +43,26 @@ jobs:
           VULNS=$(jq '(.metadata.vulnerabilities.high // 0) + (.metadata.vulnerabilities.critical // 0)' audit.json 2>/dev/null || echo "0")
           echo "vulnerabilities=$VULNS" >> $GITHUB_OUTPUT
 
-      - name: Check outdated packages
-        id: outdated
-        run: |
-          npm outdated --json > outdated.json 2>/dev/null || true
-          OUTDATED=$(jq 'keys | length' outdated.json 2>/dev/null || echo "0")
-          echo "count=$OUTDATED" >> $GITHUB_OUTPUT
-
-      - name: Open issue if problems found
-        if: steps.audit.outputs.vulnerabilities != '0' || steps.outdated.outputs.count != '0'
+      - name: Open issue if vulnerabilities found
+        if: steps.audit.outputs.vulnerabilities != '0'
         env:
           GITEA_TOKEN: ${{ gitea.token }}
           SERVER_URL: ${{ gitea.server_url }}
           REPOSITORY: ${{ gitea.repository }}
         run: |
           VULNS="${{ steps.audit.outputs.vulnerabilities }}"
-          OUTDATED="${{ steps.outdated.outputs.count }}"
           DATE=$(date '+%Y-%m-%d')
 
           VULN_LIST=$(jq -r '.vulnerabilities | to_entries[] | "- \(.key): \(.value.severity)"' audit.json 2>/dev/null | head -20 || echo "N/A")
-          OUTDATED_LIST=$(jq -r 'to_entries[] | "- \(.key): \(.value.current) → \(.value.latest)"' outdated.json 2>/dev/null | head -20 || echo "N/A")
 
-          printf '## Dependency Check — %s\n\n### Vulnerabilità (high/critical): %s\n\n```\n%s\n```\n\n### Pacchetti obsoleti: %s\n\n```\n%s\n```\n' \
-            "$DATE" "$VULNS" "$VULN_LIST" "$OUTDATED" "$OUTDATED_LIST" > /tmp/body.md
+          printf '## Security Audit — %s\n\n### Vulnerabilità (high/critical): %s\n\n```\n%s\n```\n' \
+            "$DATE" "$VULNS" "$VULN_LIST" > /tmp/body.md
 
           curl -s -X POST \
             -H "Content-Type: application/json" \
             -H "Authorization: token $GITEA_TOKEN" \
             "$SERVER_URL/api/v1/repos/$REPOSITORY/issues" \
             -d "{
-              \"title\": \"[$DATE] Dipendenze: $VULNS vulnerabilità, $OUTDATED obsoleti\",
+              \"title\": \"[$DATE] Security: $VULNS vulnerabilità high/critical\",
               \"body\": $(jq -Rs . /tmp/body.md)
             }"