docs(ci): add workflow README and expand workflow tests

[d-oit]

Adds comprehensive documentation and tests for GitHub Actions workflows:

• README.md: Documents all 12 workflows, their purposes, triggers, and best practices
• Expanded tests: Added validation tests for CI and Security Scan workflows (20 tests total)
• Test coverage: Validates YAML structure, job dependencies, timeouts, and permissions

All tests pass locally.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
do-knowledge-studio	Ready	Preview, v0	Aug 11, 2026 5:37pm

[deepsource-io]

DeepSource Code Review

We reviewed changes in 82e403a...744bf62 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Aug 11, 2026 5:36p.m.	Review ↗
Python		Aug 11, 2026 5:36p.m.	Review ↗
Shell		Aug 11, 2026 5:36p.m.	Review ↗
SQL		Aug 11, 2026 5:36p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[owl-watch]

🦉 OwlWatch reviewed this change — 1 new finding(s).

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[owl-watch]

🦉 OwlWatch reviewed this change — 1 new finding(s).

[owl-watch]

🦉 OwlWatch reviewed this change — 1 new finding(s).

[owl-watch]

🦉 OwlWatch reviewed this change — 1 new finding(s).

Additional findings:

• [LOW · tracker] Potential issues with duplicate approval check in Dependabot Auto-Merge workflow (.github/workflows/dependabot-auto-merge.yml:23)