sneak 22e6bda2bb Cancel replaced CI runs and drop the checkout token (closes #107) ...

The canonical `.gitea/workflows/check.yml` gains a `concurrency` block grouped
by workflow and branch with `cancel-in-progress: true`, so a new push cancels
the older run on the same branch and no other, and its checkout step sets
`persist-credentials: false`, so the job's token is not left in `.git/config`;
`script/cibuild` needs none. Both come from `dnswatcher`, where a byte-identical
re-vendor would have removed them. The workflow bullet of
`prompts/REPO_POLICIES.md` and both checklists now describe the file as it is.

Model: opus-5-5

2026-10-06 01:35:43 +00:00

..

workflows

Cancel replaced CI runs and drop the checkout token (closes #107)

2026-10-06 01:35:43 +00:00