Repository navigation

ci: add safe repo-health shadow verification #1841

	name: Scope Check
	on:
	pull_request:
	types: [opened, synchronize, reopened, labeled]

	permissions:
	pull-requests: read
	contents: read

	jobs:
	scope-boundary:
	name: "Scope Boundary"
	runs-on: ubuntu-latest
	if: >-
	startsWith(github.head_ref, 'repo-health/') \|\|
	contains(github.event.pull_request.labels.*.name, 'repo-health')
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7
	with:
	fetch-depth: 0
	- name: Check for product code in repo-health PR
	run: \|
	PRODUCT_FILES=$(git diff --name-only origin/${{ github.base_ref }}...HEAD -- 'packages/squad-cli/src/' 'packages/squad-sdk/src/')
	if [ -n "$PRODUCT_FILES" ]; then
	echo "::error::Repo-health PRs must not modify product source code."
	echo "::error::The following product files were changed:"
	echo "$PRODUCT_FILES" \| while read -r f; do echo "::error:: - $f"; done
	echo "::error::Move product changes to a separate PR."
	exit 1
	fi
	echo "✅ No product source files in this repo-health PR."