ci: configure Maven mirror via gh-automation composite actions

Switches from the gh-automation reusable workflow (`ci-gradle.yml`) to its
finer-grained composite-action form, so we can inject `s4u/maven-settings-action`
between `setup` and `build`. The action writes a `~/.m2/settings.xml` whose
wildcard mirror points at Moderne's Artifactory cache; the
MavenSettingsAutoLoadingExtension introduced earlier in this PR loads it into
the test ExecutionContext, avoiding Maven Central's HTTP 404 + Retry-After
throttling under parallel test load.

The composite actions land in openrewrite/gh-automation#94.

Author: jkschneider

.github/workflows/ci.yml

@@ -20,18 +20,40 @@ concurrency:
 
 jobs:
   build:
-    uses: openrewrite/gh-automation/.github/workflows/ci-gradle.yml@main
-    with:
-      java_version: |
-        25
-        21
-    secrets:
-      gradle_enterprise_access_key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
-      sonatype_username: ${{ secrets.SONATYPE_USERNAME }}
-      sonatype_token: ${{ secrets.SONATYPE_TOKEN}}
-      ossrh_signing_key: ${{ secrets.OSSRH_SIGNING_KEY }}
-      ossrh_signing_password: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
-      OPS_GITHUB_ACTIONS_WEBHOOK: ${{ secrets.OPS_GITHUB_ACTIONS_WEBHOOK }}
-      node_auth_token: ${{ secrets.NPM_TOKEN }}
-      pypi_token: ${{ secrets.PYPI_OPENREWRITE_PUBLISH }}
-      nuget_api_key: ${{ secrets.NUGET_API_KEY }}
+    runs-on: ubuntu-latest
+    if: github.event_name != 'schedule' || github.repository_owner == 'openrewrite' || github.repository_owner == 'moderneinc'
+    steps:
+      - uses: openrewrite/gh-automation/.github/actions/setup@main
+        with:
+          java_version: |
+            25
+            21
+          develocity_access_key: ${{ secrets.GRADLE_ENTERPRISE_ACCESS_KEY }}
+
+      # Route Maven resolution through Moderne's Artifactory cache to avoid
+      # Maven Central rate-limiting (HTTP 404 + Retry-After) under parallel
+      # test load. Picked up by MavenSettingsAutoLoadingExtension at test time.
+      - uses: s4u/maven-settings-action@v3.1.0
+        with:
+          mirrors: '[{"id": "moderne-cache", "name": "Moderne Artifactory Cache", "mirrorOf": "*", "url": "https://artifactory.moderne.ninja/artifactory/moderne-cache-3/"}]'
+
+      - uses: openrewrite/gh-automation/.github/actions/build@main
+
+      - if: failure() && github.event_name == 'schedule' && (github.repository_owner == 'openrewrite' || github.repository_owner == 'moderneinc')
+        uses: openrewrite/gh-automation/.github/actions/slack-failure@main
+        with:
+          webhook: ${{ secrets.OPS_GITHUB_ACTIONS_WEBHOOK }}
+
+      - if: >
+          github.event_name != 'pull_request' &&
+          github.ref == 'refs/heads/main' &&
+          (github.repository_owner == 'openrewrite' || github.repository_owner == 'moderneinc')
+        uses: openrewrite/gh-automation/.github/actions/publish-snapshots@main
+        with:
+          sonatype_username: ${{ secrets.SONATYPE_USERNAME }}
+          sonatype_token: ${{ secrets.SONATYPE_TOKEN }}
+          ossrh_signing_key: ${{ secrets.OSSRH_SIGNING_KEY }}
+          ossrh_signing_password: ${{ secrets.OSSRH_SIGNING_PASSWORD }}
+          node_auth_token: ${{ secrets.NPM_TOKEN }}
+          pypi_token: ${{ secrets.PYPI_OPENREWRITE_PUBLISH }}
+          nuget_api_key: ${{ secrets.NUGET_API_KEY }}