Repository navigation

ci(provisioning): don't persist checkout token while caller code runs #1889

Job	Run time
governance / Guix packaging policy (Nix retired)	7s
governance / Allowlist Preflight	5s
governance / Check Workflow Staleness	6s
governance / UUID v7 conformance	12s
governance / Language / package anti-pattern policy	10s
governance / Security policy checks	5s
governance / Licence consistency	7s
governance / Trusted-base reduction policy	6s
governance / Exemption ratchet	10s
governance / Debt ratchet	8s
governance / Well-Known (RFC 9116 + RSR)	5s
governance / Live Actions policy (credentialed advisory)	8s
governance / Code quality + docs	10s
governance / Workflow security linter	20s
governance / Actions lockfile verify	11s
governance / Validate Hypatia Baseline	43s
	2m 53s