docs: trim README release history and skip unused PR CI lanes

[Wibias]

Summary

• README current-state now keeps only the documented fail-closed limits and the still-expanding list, and release notes point at CHANGELOG.md instead of duplicating version history.
• Pull-request Windows Authority, JavaScript CodeQL, and C# CodeQL now run only when the trusted base-SHA path classifier says those lanes are in scope; scope detection failure still fail-closes into running the lane.
• The Windows rewrite-baseline workflow is path-filtered to the files it actually exercises.

Test plan

• node --test tests/unit/ci-scope.test.mjs tests/unit/actions-usage-contract.test.mjs tests/unit/deep-audit-hardening.test.mjs tests/unit/workflow-security.test.mjs
• Confirm a documentation-only follow-up PR skips Windows Authority and C# CodeQL
• Confirm this PR still runs those lanes because it changes CI workflows and scripts/ci-scope.mjs

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: db7adf3e-afdd-4f1e-b199-a35c19cf9a6e

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}