configure-codacy-cloud: add hard rules, stop recommending standard edits

[andrzej-janczak]

Problem: The skill let the agent disable Security patterns, suggest ignoring infra folders, and recommend edits to org coding standards (seen in prod runs). Four places in SKILL.md told it to recommend standard edits.
Fix: Add a "Hard rules" section before the first pass and rewrite the four lines to record the lock in conflicts[] instead.

[andrzej-janczak]

[AI Claude] Why these four rules. Each blocks one move seen in prod autoconfig runs (Snakestack 893776):

1. Security patterns: the agent tried to disable Bandit B608/B311 only to lower the issue count; only the coding standard stopped it.
2. Infra ignorePaths: the agent recommended ignoring infra/**, which hides IaC/pipeline findings where SAST matters most.
3. Coding standards: the agent recommended loosening the org Security Default Standard. A standard is org policy; a repo tune must not weaken it, and the pod token cannot change it anyway.
4. Absent-language patterns: the agent counted removed Python patterns in a JS-only repo as a win. Codacy never ran them, so the issue count did not move.