harden: trusted PATH boundary, command timeouts, parser correctness #6
ci.yml
on: push
lint (man + smoke.sh)
19s
static analysis (cppcheck)
28s
Matrix: build-and-test
Matrix: build-distro