actionlint

Keep obviously broken GitHub Actions workflows out of the repository. Before a commit that touches workflow files, run actionlint over the staged ones; any non-zero exit blocks the commit until it's fixed.

This pairs with vcs-identity-check and vcs-commit-msg as one more pre-commit precondition — the three are independent, so their order doesn't matter.

When in doubt, ask the operator