Automating DevSecOps Static Analysis with GitHub Actions and Agent Skills