Fix CI Failures

Take the branch named in the input, or main when none is given. Find its most recent CI failures, triage each one from the logs that already exist, and fix what is real. The logs are the whole evidence: CI is a record you read, never a thing you trigger. Your own proof that a fix works is the failing command run green locally. Text after the branch name is overriding guidance.

Project context. Follow the repo's AGENTS.md / CLAUDE.md rules for tests, lint, cache clears, and a dirty tree.

1. Find the latest failures

Run git fetch origin. For each workflow, take only its newest completed run on the branch. An older failure whose workflow has passed since is already fixed, and a run still in progress is not evidence yet: skip both.