A development-proposal PR previously got no check at all (the workflow only fired on push to main) - so branch protection's required status check, the thing that makes the automation's merge_when_checks_succeed an actual lint gate, had nothing to require. Lint now runs on both events; the content-reload NATS publish stays push-only. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>