feat: add Lizard, jscpd, and docs/CI file checks to scan pipeline

[lindsay-cheng]

Closes #14

Summary

• Adds Lizard (complexity) and jscpd (duplication) to Phase B; combines into published code_quality (60/40, graceful degrade if one fails)
• Adds pure Node.js docs-check and cicd-check for documentation_standards and cicd_devops
• Pins lizard==1.22.2 and jscpd@4.2.5 in the worker image; updates THIRD-PARTY-NOTICES.md