chore(release): promote develop → main (week of 2026-07-06)

[aptracebloc]

Release promotion: develop → main

Opened ahead of the staging release week of Mon 2026-07-06 to start Bugbot review early and surface issues before the cutover. Head is develop, so PRs that merge in before the release will update this PR's head and re-trigger Bugbot automatically.

Delta (1 commit(s) ahead of main)

Initial snapshot — will change as more lands on develop.

• ci(security): add public-repo PII gate caller (ci(security): add public-repo PII gate caller #59)

Files changed

 .github/workflows/public-pii-gate-caller.yml | 14 ++++++++++++++
 environment-setup/configuration.mdx          |  7 +------
 environment-setup/setup-guide.mdx            |  4 ----
 environment-setup/troubleshooting.mdx        |  1 -
 4 files changed, 15 insertions(+), 11 deletions(-)

---

Note

Low Risk
CI-only addition with no application runtime changes; risk is limited to PR check behavior if the shared gate misfires or blocks legitimate content.

Overview
Adds a Public PII gate GitHub Actions workflow that runs on pull request lifecycle events (opened, edited, reopened, synchronize, labeled, unlabeled).

The new caller delegates to the shared reusable workflow tracebloc/.github/.github/workflows/public-pii-gate.yml@main with secrets: inherit, matching other per-repo callers in this repo. The gate is intended to block PRs when the title, body, or commits match denylisted customer/partner names or known secrets; scanning logic stays in the central workflow, not in this file.

^{Reviewed by Cursor Bugbot for commit 2ad3539. Bugbot is set up for automated code reviews on this repo. Configure here.}