A smoke workflow now runs the action from a clean checkout: offline on the bundled example (expects ACTIVE and
all four reports) and against the malicious fixture (expects the step to fail with BLOCKED). The description
is cut to the 125 characters the Marketplace listing allows, and the action says plainly when Node is older
than 20 instead of dying on a syntax error.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>