The sync step read spec_path/spec_paths with core.getInput, but those
arrive as workflow_call inputs on the job and are never exposed to the
step as INPUT_* variables. getInput always returned empty, so the script
resolved zero files, logged "No spec files resolved." and exited green
without opening a PR — a silent no-op in all seven consuming repos.

Pass them through the step env instead. Using env rather than the step's
with block also avoids the "Unexpected input(s)" warning that undeclared
inputs to actions/github-script would produce.

Confirmed against s3d, where master's openapi.yml still declared 0.1.1
against release v0.1.4: the current code resolves no files, and with this
change it resolves openapi.yml and would update 0.1.1 -> 0.1.4.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>