Search Gradle plugins

Provides prerequisites lifecycle to Gradle

• #prerequisites
• #dependencies
• #build tools
• #lock

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

Root-project prerequisite for all com.stano plugins. Registers the 'root' BaseExtension exposing cross-project configuration: javaVersion (default '21'), contextName, mspVersion, Docker registry coordinates, Pact Broker coordinates, and lazy CI metadata providers (branch name, commit hash, commit timestamp, build number). Registers the jacocoRootReport task that aggregates JaCoCo coverage across all subprojects. Must be applied to the root project before any other com.stano plugin.

• #convention
• #jacoco
• #java