Deletes the entire v2 footprint, leaving only the v1 MSDO action:
- src/v2/, lib/v2/, v2/action.yml
- test/defender-*.tests.ts and test/job-summary.tests.ts
- .github/workflows/self-hosted-validation-v2.yml

v1 has no imports from v2, so the build and v1 tests still pass.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

chore: remove v2 (Defender CLI) action

Bumps [sinon](https://github.com/sinonjs/sinon) from 21.1.2 to 22.0.0.
- [Release notes](https://github.com/sinonjs/sinon/releases)
- [Changelog](https://github.com/sinonjs/sinon/blob/main/docs/changelog.md)
- [Commits](sinonjs/sinon@v21.1.2...v22.0.0)

---
updated-dependencies:
- dependency-name: sinon
  dependency-version: 22.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…three documentation gaps (#272)

* fix(toolkit): honor HTTPS_PROXY and NO_PROXY when downloading the MSDO CLI

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* docs: clarify that bundled tool versions track the MSDO CLI release

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* docs: document existingFilename for publishing SARIF from other tools

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* docs: explain tool selection and the container-mapping exception

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* fix(toolkit): fall back to a direct connection when the proxy environment variable is not a valid URL

* docs: correct the container-mapping tool selection claim

* docs: fix the garbled SARIF clause in the opening description

---------

Co-authored-by: DimaBir <DimaBir@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>