🧱 chore(release): bump version to 1.0.8

- Added dynamic Unreleased compare link for changelog auto-updates
- Improved versioning automation and tagging safety
- Fixed newline warning in dependabot.yml
- Unified workflow timezone (Asia/Tokyo) and metadata consistency
- Updated CHANGELOG and docs for v1.0.8

.github/workflows/validate.yml

@@ -31,14 +31,16 @@ on:
       # 🔒 Security or metadata configs
       - '.github/dependabot.yml'
       - '.github/renovate.json'
-    paths-ignore:
-      # 📝 Documentation-only changes shouldn't trigger builds
-      - '**/*.md'
-      - '**/*.txt'
-      - 'docs/**'
-      - 'LICENSE*'
-      - 'CONTRIBUTING*'
-      - 'CHANGELOG.md'
+
+      # 🧹 Excluded documentation or text files
+      - '!**/*.md'
+      - '!**/*.txt'
+      - '!docs/**'
+      - '!LICENSE*'
+      - '!CONTRIBUTING*'
+      - '!CHANGELOG.md'
+      - '!SECURITY.md'
+      - '!CODE_OF_CONDUCT.md'
 
 permissions:
   contents: read