feat: implement issue #1455 — [Fleet Monitor] petry-projects/.github-private — .github/workflows/ci.yml

.github/workflows/lint.yml

@@ -42,6 +42,9 @@
       - name: Install Python deps (validator tests)
         run: pip3 install --quiet 'jsonschema>=4' pyyaml
 
+      - name: Install markdownlint-cli2 (behavioral regression test)
+        run: npm install -g markdownlint-cli2@0.23.2
+
       - name: Run tests
         run: |
           scripts/run-bats.sh \
@@ -75,6 +78,7 @@
             tests/test_cut_release.bats \
             tests/test_cut_release_cross_repo.bats \
             tests/test_gitleaks_config.bats \
+            tests/test_markdownlint_config.bats \
             tests/test_initiative_planner.bats \
             tests/test_initiative_planner_redispatch.bats \
             tests/test_initiative_reconcile.bats \
@@ -197,7 +201,7 @@
     timeout-minutes: 5
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         # NOTE: persist-credentials is intentionally left at the default (true) —
         # vci_resolve_reusable needs `git fetch origin` to authenticate against this
         # private repo when resolving same-repo channel tags. Setting
         # persist-credentials: false would silently push every such caller into the

.gitignore

@@ -397,6 +397,9 @@ private.yml
 __pycache__/
 *.pyc
 
+# npm dependencies — never vendored; bats is installed via apt in CI (#1455)
+node_modules/
+
 # Vendor-specific Claude Code skill projections — BMAD lives in frameworks/ (agent-agnostic).
 .claude/skills/
 

.markdownlint-cli2.jsonc

@@ -53,6 +53,8 @@
   "ignores": [
     ".claude/**",
     "frameworks/**",
-    "prompts/**"
+    "prompts/**",
+    // Vendored npm dependencies — third-party markdown we do not lint (#1455).
+    "node_modules/**"
   ]
 }