chore: fix CI tag globs, consolidate CODEOWNERS, remove leftover files

- Exclude vscode-* tags from publish.yml and docker.yml to prevent
  false PyPI/Docker builds when VS Code extension tags are pushed
- Consolidate CODEOWNERS into .github/CODEOWNERS (takes precedence)
- Upgrade publish-vscode.yml action versions to @v6
- Remove leftover n8n-readme-rewrite.md, credentials/, icon-placeholder

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Zie619

.github/CODEOWNERS

@@ -1 +1,20 @@
+# AI-BOM Code Owners
+# These owners will be requested for review on PRs
+
+# Default owners for everything
 * @Zie619
+
+# Scanners
+/src/ai_bom/scanners/ @Zie619
+
+# Reporters
+/src/ai_bom/reporters/ @Zie619
+
+# CI/CD
+/.github/ @Zie619
+
+# Documentation
+/docs/ @Zie619
+
+# VS Code Extension
+/vscode-extension/ @Zie619

.github/workflows/docker.yml

@@ -2,7 +2,9 @@ name: Docker
 
 on:
   push:
-    tags: ["v*"]
+    tags:
+      - "v*"
+      - "!vscode-*"
 
 permissions:
   contents: read

.github/workflows/publish-vscode.yml

@@ -6,8 +6,8 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v6
+      - uses: actions/setup-node@v6
         with:
           node-version: 20
       - run: cd vscode-extension && npm ci

.github/workflows/publish.yml

@@ -2,7 +2,9 @@ name: Publish to PyPI
 
 on:
   push:
-    tags: ["v*"]
+    tags:
+      - "v*"
+      - "!vscode-*"
 
 permissions:
   id-token: write