Scan for Quantum-Vulnerable Crypto in GitHub Actions CI

Inventory your RSA and ECDH, gate the pull request, and baseline the rest — with a copy-paste workflow.