Trigger when adding or modifying .github/workflows/*.yml, creating CI for a new repo, adding deployment/release automation, scheduling cron jobs, or fixing slow or insecure workflows — covering trigger design, concurrency, matrices, caching, minimal permissions, OIDC instead of long-lived cloud keys, action pinning, secret hygiene, and a runnable rollback/remove plan. Trigger phrases include "add a workflow", "set up CI", "deploy on tag", "fix this slow CI", "OIDC to AWS", "schedule a job", "/github-actions-author", "GitHub Actions".
