ci(policy): repin the organization commit-lint workflow

[ss-o]

Summary

• Repin .github/workflows/commit-lint.yml from z-shell/.github 64a427d to 6fac3d4 (ci: support shared Zi quality workflow contracts .github#765). 64a427d is the pre-squash commit of docs(policy): make contributor tool attribution advisory .github#764 and is on no branch there; callers pinned to it end in a startup failure with no jobs, so the required Policy checks never report. 6fac3d4 is on z-shell/.github main, is the latest commit that changes commit-lint.yml, and also drops the called workflow's concurrency group (fix(ci): duplicate edit and push runs leave cancelled required checks that block merges zi#597).
• Update the caller's comment, which said the called workflow declares a concurrency group; at 6fac3d4 neither declares one.

Refs z-shell/.github#774

Verification

• The same repin made Commit Lint run and pass on chore(github): sync the organization forms and repin commit-lint zsh-lint#603 and chore(github): sync the organization forms and repin commit-lint wiki#941.
• The four Policy checks on this pull request run against 6fac3d4.

Agent handoff

No handoff needed.

[cloudflare-workers-and-pages]

Deploying src with    Cloudflare Pages

Latest commit:	1260470
Status:	✅  Deploy successful!
Preview URL:	https://8ea3c484.zi-src.pages.dev
Branch Preview URL:	https://feature-774.zi-src.pages.dev

View logs

[ss-o]

Fallback review under ADR-0026: Copilot request not registered on 1260470

Findings

No actionable findings.

Scope: the complete diff of 1260470 against main at 2c5eaac: one file, .github/workflows/commit-lint.yml, with the reusable-workflow pin moved from 64a427d to 6fac3d4 and the concurrency comment rewritten.

Important

Sole-maintainer exception under ADR-0035. The maintainer declared that no second human is available and elected the exception for this pull request at 1260470. A Copilot review was requested on 2026-10-09 at about 12:53Z and no review_requested event for Copilot followed; the cause is unconfirmed. A separate read-only review of the same head ran in a different reviewing session, as ADR-0035 decision 3 requires. Additional automated scrutiny is not a second human.

Note

This review is by the pull request's author. It does not approve deployment or release.

Separate read-only review

Head confirmed with the diff one file, .github/workflows/commit-lint.yml, four lines changed. No actionable findings. Pin: 6fac3d4 is reachable from z-shell/.github main and is the latest commit touching commit-lint.yml there; it differs from 64a427d only by the removed concurrency group, and has no concurrency key. Caller compatibility: both called-workflow inputs are optional and the caller passes none; permissions fit within contents: read. Supply chain: full-SHA pin on main, actions/checkout pinned by SHA, no pull_request_target, no secrets. Deployment: no push-to-main build or deploy reads this file. Limits: the called workflow was compared by diff, not executed locally.

Validation

• Passed: all 15 hosted checks on 1260470, including the four required Policy checks, which ran against 6fac3d4.
• Copilot: requested once on 2026-10-09 at about 12:53Z; no review_requested event for Copilot followed. Cause unconfirmed.

Checklist verdicts and supporting evidence

• Pin: correct. 6fac3d4 is a full SHA on z-shell/.github main and the latest commit there that changes commit-lint.yml; 64a427d is on no branch (z-shell/.github#774). The two versions differ only by the removed concurrency group.
• Compatibility: unchanged. The caller's trigger, inputs and contents: read permission are as before; the called workflow's inputs are optional.
• Comment: accurate. Neither the caller nor the called workflow declares a concurrency group at 6fac3d4.

Limits and follow-up

• Recovery: revert the squash commit; the previous caller is restorable from main at 2c5eaac.
• The cause of the startup failure on 64a427d is inferred from its absence from every branch, not confirmed; tracked in z-shell/.github#774.