Verify GitHub Actions changes against checked-in workflows and official event semantics

When reviewing or modifying GitHub Actions, inspect the actual files under .github/workflows and refer to workflows by their stable checked-in filenames rather than placeholders or numeric IDs. Validate trigger behavior against official GitHub documentation, including default-branch requirements, supported activity types, GITHUB_REF/GITHUB_SHA meanings, manual-dispatch constraints, and fork secret/token restrictions. Preserve required operational behavior such as manual recovery and fresh label-event emission while failing closed around privileged credentials and untrusted workflow refs.