make resolver network/filesystem access opt-in #69

	# Smoke tests only run on non-master branches. Smoke tests cut
	# some corners by running selected tests in parallel (to shave off
	# some execution time)
	# Once a pull request is merged to master, workflows/ci.yml is run
	name: Smoke Tests
	on:
	push:
	branches-ignore:
	- main

	jobs:
	build:
	runs-on: ubuntu-latest
	name: "Smoke"
	steps:
	- name: Checkout repository
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	- name: Check documentation generator
	run: \|
	find . -name '.md' -not -name 'AGENTS.md' -not -name 'CLAUDE.md' -not -path './examples/' \| xargs env AUTODOC_DRYRUN=1 perl tools/autodoc.pl
	- name: Cache testdata
	uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
	env:
	TEST_SUITE_COMMIT: "48461fc3568972801b40eaccc428a31bce338f6e"
	with:
	path: tests
	key: ${{ runner.os }}-testdata-${{ env.TEST_SUITE_COMMIT }}
	restore-keys: \|
	${{ runner.os }}-testdata-
	- name: Setup testdata
	env:
	TEST_SUITE_COMMIT: "48461fc3568972801b40eaccc428a31bce338f6e"
	run: \|
	./init-test-suite.sh $TEST_SUITE_COMMIT
	- name: Cache Go modules
	uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
	with:
	path: \|
	~/go/pkg/mod
	~/.cache/go-build
	~/.cache/bazel
	key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
	restore-keys: \|
	${{ runner.os }}-go-
	- name: Install Go stable version
	uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
	with:
	go-version-file: "go.mod"
	check-latest: true
	- name: Run smoke tests
	run: go test -short ./...

Provide feedback