Compromise of CI/CD

Adversaries may compromise CI/CD components such as GitHub Actions to gain access to software build, test, and deployment processes. Malicious workflow or action changes can expose runtime credentials or introduce further malicious components. The step below is an inert, authorized workflow-execution canary; it does not expose secrets, alter production software, or emulate a compromise.