dgrunner-setup

SUSPICIOUS due to incomplete provenance verification for the @upstand/dgrunner package, but otherwise coherent and proportionate to a self-hosted GitHub runner setup skill. No clear credential harvesting, exfiltration, stealth, or malicious mismatch is present; the main concern is trust in the external CLI being installed and executed.