Retain the master-only authorization and trusted reporting checkout. Verify that lock resolution changes only the CI-owned lockfile, and align cache regressions with the existing pinned upstream workflow.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Dotta