chore: link the FOSSA license scan for CLOMonitor

CLOMonitor's license_scanning check passes when the README links a FOSSA
or Snyk project, or when a root .clomonitor.yml names the results URL.
#4222 trimmed the README badge row, so use the metadata file.

The key is `licenseScanning` (camelCase). CLOMonitor deserialises the
file with serde `rename_all = "camelCase"`, so the snake_case
`license_scanning` proposed in #4758 would be ignored without an error.

The FOSSA project is analysed at a current main revision again
(3a463609e, 2026-10-12), with 0 unresolved licensing issues.

Refs: #4758

Assisted-by: LLM
Signed-off-by: Marian Koreniuk <moriarti@cp.if.ua>

.clomonitor.yml

@@ -0,0 +1,8 @@
+# CLOMonitor metadata file, read when CLOMonitor lints this repository:
+# https://clomonitor.io/projects/cncf/cozystack
+# Format: https://github.com/cncf/clomonitor/blob/main/docs/metadata/.clomonitor.yml
+
+# License scanning results: the CNCF FOSSA project for this repository, kept
+# current by the FOSSA GitHub integration on the cozystack organization (#4758).
+licenseScanning:
+  url: https://app.fossa.com/projects/git%2Bgithub.com%2Fcozystack%2Fcozystack