Detection-as-Code in One GitHub Action with RSigma

Lint, validate, fields-drift, backtest, and ATT&CK coverage for Sigma rules in one workflow