ci: gate optional Claude and security-scan jobs behind repository variables #133
workflow-checks.yml
on: pull_request
Actionlint
8s
Zizmor
24s