CI Rules
CI Rules
Conventions for continuous integration across all repos.
Rules
- CI never pushes directly to main
- CI never uses
[skip ci] - CI permissions are minimal (only what's needed)
- All workflows must be idempotent (safe to re-run)