[ci] Write checked CI plans for Actions

[joshlf]

Add a github-plan command which loads the same validated repository
inputs as the local audit, builds one projection, and publishes its
compact matrices and detailed artifact to explicit caller-supplied
paths.

Parse every required option before reading the checkout. Create the
artifact before appending job outputs so a failed artifact publication
cannot expose a matrix from a partially successful command.

Tests: CARGO_NET_OFFLINE=true cargo +1.93.1 test --manifest-path
tools/Cargo.toml -p zc --lib

Authored by an agent, posting via joshlf's account

---

• 　  [ci] Document the typed CI control plane #3597
• 　  [ci] Audit typed jobs into the required check #3595
• 　  [ci] Audit the semver action adapter #3587
• 　  [ci] Audit typed matrix execution #3594
• 　  [ci] Audit typed plan publication #3593
• 　  [ci] Make typed workflow bridges fail closed #3592
• 　  [ci] Drive matrix jobs from typed plans #3591
• 　  [ci] Retire the generated-matrix toolchain check #3596
• 　  [ci] Project only executable cell selectors #3590
• 　  [ci] Execute exact typed matrix cells #3589
• 　  [ci] Require execution parity before planning #3588
• 　  [ci] Model exact CI command behavior #3586
• 　  [ci] Read docs.rs arguments from Cargo metadata #3585
• 　  [ci] Shadow typed plans in Actions #3584
• 👉 [ci] Write checked CI plans for Actions #3583
• 　  [ci] Project typed plans for GitHub Actions #3582
• 　  [ci] Expose typed CI planning locally #3581
• 　  [ci] Derive deterministic build and Miri plans #3580
• 　  [ci] Validate all inputs before CI planning #3579
• 　  [ci] Audit live CI inputs against policy #3578
• 　  [ci] Read frozen CI baselines strictly #3577
• 　  [ci] Inventory workflow jobs explicitly #3576
• 　  [ci] Define a typed CI coverage policy #3575
• 　  [ci] Freeze the current CI coverage baseline #3573
• 　  [ci] Let hook inventory skip data directories #3572
• 　  [ci] Share typed toolchain metadata #3571
• 　  [ci] Pin and test repository tools #3570
• 　  [ci] Make pre-push checks safe to run in parallel #3574

Latest Update: v3 — Compare vs v2

📚 Full Patch History

Links show the diff between the row version and the column version.

Version	v2	v1	Base
v3	vs v2	vs v1	vs Base
v2		vs v1	vs Base
v1			vs Base

⬇️ Download this PR

Branch

git fetch origin refs/heads/G7enmvjxtn3q2hjsb7gwvzaajiqlp4m4c && git checkout -b pr-G7enmvjxtn3q2hjsb7gwvzaajiqlp4m4c FETCH_HEAD

Checkout

git fetch origin refs/heads/G7enmvjxtn3q2hjsb7gwvzaajiqlp4m4c && git checkout FETCH_HEAD

Cherry Pick

git fetch origin refs/heads/G7enmvjxtn3q2hjsb7gwvzaajiqlp4m4c && git cherry-pick FETCH_HEAD

Pull

git pull origin refs/heads/G7enmvjxtn3q2hjsb7gwvzaajiqlp4m4c

Stacked PRs enabled by GHerrit.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.85%. Comparing base (7bb9d60) to head (025bcc7).

Additional details and impacted files

@@                        Coverage Diff                         @@
##           Gujggzvgefxnk44kuhaoccbp5e6iuv7j7    #3583   +/-   ##
==================================================================
  Coverage                              91.85%   91.85%           
==================================================================
  Files                                     20       20           
  Lines                                   6093     6093           
==================================================================
  Hits                                    5597     5597           
  Misses                                   496      496           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.