chore(main): release hve-core 3.4.0

[hve-core-release-please]

🤖 I have created a release beep boop

3.4.0 (2026-04-10)

✨ Features

• 1004: add OutputPath parameter to Invoke-LinkLanguageCheck.ps1 (#1229) (2aad98e)
• add -OutputPath parameter to Validate-SkillStructure.ps1 (#1225) (d1e0b35)
• agents: replace hve-core-specific references with portable discovery-based language (#1335) (ef520df)
• docs: add extension collections overview and integrate into getting started flow (#950) (b6fa2aa)
• skill: introduce owasp-cicd (#1246) (a3acef3)
• skill: introduce owasp-infrastructure (#1244) (024f61f)
• skill: introduce owasp-mcp (#1207) (dfd04e0)
• skills: add secure-by-design knowledge skill (#1223) (a18ab1a)
• workflows: add maintainer-only skip-review label guard (#1293) (6e4ea2e)

🐛 Bug Fixes

• agents: add parallel subagent dispatch and structured JSON contracts to code-review-full (#1304) (06df9d2)
• agents: fix plugin compatibility and robustness for coding-standards code review agents (#1289) (8319d10)
• ci: add synchronize trigger to PR Review workflow (#1323) (060f64d)
• docs: derive collection artifact counts from YAML at build time (#1275) (0c30bad)
• docs: escape hyphens in Mermaid diagram on Collections page (#1262) (ce0e531)
• linting: add summary timestamp to PSScriptAnalyzer output (#1211) (0da852f)
• scripts: standardize timestamp in FrontmatterValidation.psm1 to use Get-StandardTimestamp (#1285) (98dcee4)
• scripts: standardize timestamp in Invoke-LinkLanguageCheck.ps1 to use Get-StandardTimestamp (#1264) (dd2ae45)
• scripts: standardize timestamp in Invoke-YamlLint.ps1 to use Get-StandardTimestamp (#1270) (11a483f)
• scripts: standardize timestamp in Markdown-Link-Check.ps1 to use Get-StandardTimestamp (#1283) (d140f13)
• scripts: standardize timestamp in SecurityHelpers.psm1 to use Get-StandardTimestamp (#1284) (07bd2ab)
• scripts: standardize timestamp in Test-CopyrightHeaders.ps1 to use Get-StandardTimestamp (#1278) (84ddd5d)
• scripts: standardize timestamp in Validate-SkillStructure.ps1 to use Get-StandardTimestamp (#1280) (a1928f3)
• scripts: standardize timestamps in Test-DependencyPinning.ps1 and SecurityClasses.psm1 (#1282) (65837ff)
• workflows: fix dependency-review path filters and sparse-checkout cone mode (#1259) (8722d8f)

🔧 Maintenance

• deps-dev: bump basic-ftp from 5.2.0 to 5.2.1 (#1324) (057c691)
• deps-dev: bump the npm-dependencies group with 2 updates (#1297) (bcc2e84)
• deps: update github/gh-aw-actions requirement to 536ea1bad8c6715d098a9dc1afea8d403733acfe in the github-actions group across 1 directory (#1298) (812569b)
• licensing: update security instruction attributions and compliance (#1294) (1dca623)

---

This PR was generated with Release Please. See documentation.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.65%. Comparing base (ef520df) to head (ab97788).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1184      +/-   ##
==========================================
- Coverage   87.66%   87.65%   -0.02%     
==========================================
  Files          61       61              
  Lines        9328     9328              
==========================================
- Hits         8177     8176       -1     
- Misses       1151     1152       +1     

Flag	Coverage Δ
pester	85.22% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/hve-core	3.4.0	Unknown	Unknown

Scanned Files

• package.json