Changelog
- c063b11 build(website): add lint/typecheck scripts for CI website job
- 4d98eb5 chore(ci): add quality gates and contributor workflows
- 10093f5 feat(cli): preserve child exit codes in run command
- 3e0231e fix(ci): resolve lint blockers on tool release PR
- d2a0bc3 fix(core): tighten env parsing and secret handling paths