Lint with iris v0.1.0

The lint now lives in uhhm/iris, pinned to the portal release it
matches; question_lint leaves the portal tarball.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01L4jrCgLiKKHAEFuZUJjckH

.gitea/workflows/lint-and-reload.yml

@@ -15,13 +15,15 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      # Same bare-metal runner/host as this repo's own Deploy workflow,
+      # iris (uhhm/iris) is the lint: it reads content with the portal
-      # which ships question_lint alongside the portal binary in every
+      # release it is pinned to, so IRIS_RELEASE should match the portal
-      # pinned release - so content is validated by the exact portal
+      # this site runs (PORTAL_RELEASE in deploy.yml).
-      # version this instance runs, not a hand-maintained yq/jq subset
-      # of the same rules.
       - name: Lint questions
-        run: /srv/app/redoal-portal/current/question_lint --path questions
+        env:
+          IRIS_RELEASE: v0.1.1
+        run: |
+          curl -sfL "${{ github.server_url }}/uhhm/iris/releases/download/$IRIS_RELEASE/iris" -o iris && chmod +x iris
+          ./iris check --path questions
 
   reload:
     runs-on: bare