Merge origin/main into feat/3597-split-suites-node-matrix

Resolves conflict in .github/workflows/test.yml: keep the 6 new drift-check
steps from main (plan-scan, secrets, schema-detect, decisions,
workstream-name-policy, Shared Module hand-sync) before the split-lane test
runs from this PR. PR's dedicated `coverage` job replaces main's per-matrix
`Run tests with coverage` step.

Other conflicting files (CONTRIBUTING.md, get-shit-done/bin/lib/init.cjs,
package.json) auto-merged cleanly. Changeset files (.changeset/*) brought in
from main as adds.

package.json

@@ -65,6 +65,11 @@
     "check:configuration-fresh": "cd sdk && npm run check:configuration-fresh",
     "check:workstream-inventory-builder-fresh": "cd sdk && npm run check:workstream-inventory-builder-fresh",
     "check:project-root-fresh": "cd sdk && npm run check:project-root-fresh",
+    "check:plan-scan-fresh": "cd sdk && npm run check:plan-scan-fresh",
+    "check:secrets-fresh": "cd sdk && npm run check:secrets-fresh",
+    "check:schema-detect-fresh": "cd sdk && npm run check:schema-detect-fresh",
+    "check:decisions-fresh": "cd sdk && npm run check:decisions-fresh",
+    "check:workstream-name-policy-fresh": "cd sdk && npm run check:workstream-name-policy-fresh",
     "prepublishOnly": "npm run build:hooks && npm run build:sdk",
     "pretest": "npm run build:sdk && npm run lint:skill-deps",
     "pretest:coverage": "npm run build:sdk",
@@ -73,6 +78,7 @@
     "lint:tests": "node scripts/lint-no-source-grep.cjs",
     "lint:pr-checks": "node scripts/lint-pr-check-project-dir.cjs",
     "lint:changeset": "node scripts/changeset/lint.cjs",
+    "lint:docs": "node scripts/lint-docs-required.cjs",
     "changeset": "node scripts/changeset/new.cjs",
     "changelog:render": "node scripts/changeset/cli.cjs render",
     "test": "node scripts/run-tests.cjs",