Operator does not want nightly or weekly runs. Pushes to main already cover code changes, so the remaining addition is workflow_dispatch: a manual re-run for after a credential rotation or a budget top-up, which also retires the empty-commit trick used to pick up new secrets. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>