[stack 20/40] Verification backend modules IV

.github/actionlint.yaml

@@ -0,0 +1,5 @@
+# Actionlint 1.7.12 predates GitHub's official Xcode 27 preview image label.
+# Treat it as declared until the pinned validator includes the hosted label.
+self-hosted-runner:
+  labels:
+    - xcode-27

.gitleaksignore

@@ -0,0 +1,10 @@
+# Exact historical false positives retained for auditability. Each entry is
+# scoped to one commit, path, rule, and line; future findings in the same files
+# remain visible.
+# PostHog browser ingestion key, public by design (see tooling docs).
+930c8952a3c80edd61c06c2f49106e616c8dde9a:apps/desktop/src/lib/analytics.ts:generic-api-key:25
+39f414d063cac9ebe9258c69a81c05348f3e4b89:apps/desktop/src/lib/analytics.ts:generic-api-key:25
+# Historical Foundry public project identifier.
+81df29eebf1d724d2939cbfd8123b86e9848a940:foundry.json:generic-api-key:4
+# Historical database migration fixture value.
+ac5d18ee9b33811accec2df5d7bc33b69f9bb6c3:apps/desktop/src-tauri/src/db/schema.rs:generic-api-key:23

apps/desktop/.size-limit.json

@@ -0,0 +1,8 @@
+[
+  {
+    "name": "Complete lazy JavaScript distribution (raw)",
+    "path": "out/assets/*.js",
+    "limit": "1800 kB",
+    "brotli": false
+  }
+]