[dwolfson]

This PR combines functional enhancements to the Explorer (Catalog, Collections, Governance, Namespaces) with robust repository maintenance and security monitoring (OSSF Scorecard, automated CI, SBOM), bringing the project into alignment with FOSS best practices.

Changes

• Functional Enhancements:
  • Significant updates to the Technical Catalog, Type Explorer, and Lineage Explorer UI.
  • New handlers for Collections, Namespaces, and Information Supply Chains (ISC).
  • Integrated comprehensive Dr.Egeria command templates for Asset Maker and Schema Maker families.
  • Synced Dr.Egeria templates for the new split-per-type Lineage Linker commands (Link/Update Control Flow, Data Flow, Data Mapping, Lineage Mapping, Process Call, Ultimate Source/Destination).
• Security & Posture:
  • OSSF Scorecard: Integrated live security posture tracking via .github/workflows/scorecard.yml.
  • CI Testing: Added automated Python health and MCP server tests (python-tests.yml) targeting both Quickstart and Freshstart environments.
  • Supply Chain: Integrated CycloneDX SBOM (JSON/XML) generation into the release-on-tag.yml workflow.
  • Attribution: Added CITATION.cff for professional citation support.
• Dependencies:
  • Bumped pyegeria dependency floor to >=6.1.16 across pyproject.toml, PyegeriaWebHandler's fast-api Dockerfiles/requirements, and the dagster/prefect/airflow-marquez requirements files. 6.1.16 fixes Dr.Egeria's Lineage Linker commands, ISC membership sync, and Update-template attribute leakage.
  • Refreshed Dockerfile-jupyter's pinned quay.io/jupyter/scipy-notebook base image digest, which had drifted stale behind the :latest tag.
• Infrastructure:
  • Synchronized root pyproject.toml dependency management to support CI and local testing.
  • Updated README.md and SECURITY.md with security badges and posture statements.

Verification

• Verified workflow files are correctly formatted and recognized by GitHub Actions.
• Confirmed health tests pass in a simulated environment.
• Verified CITATION.cff syntax and PR link mapping.