Merge remote-tracking branch 'origin/main' into codex/playwright-mcp-supply-20260715

# Conflicts:
#	apps/api/tests/test_gitea_actions_secret_variable_name_inventory_api.py

apps/api/tests/test_gitea_actions_secret_variable_name_inventory_api.py

@@ -1,5 +1,7 @@
 from __future__ import annotations
 
+from pathlib import Path
+
 from fastapi import FastAPI
 from fastapi.testclient import TestClient
 
@@ -11,13 +13,20 @@ from src.services.gitea_actions_secret_variable_name_inventory import (
 
 def test_gitea_actions_secret_variable_name_inventory_loader_is_value_safe() -> None:
     payload = load_latest_gitea_actions_secret_variable_name_inventory()
+    repo_root = Path(__file__).resolve().parents[3]
+    workflow_dir = repo_root / ".gitea" / "workflows"
+    committed_workflow_file_count = sum(
+        1
+        for path in workflow_dir.iterdir()
+        if path.is_file() and path.suffix.lower() in {".yml", ".yaml"}
+    )
 
     assert (
         payload["schema_version"] == "gitea_actions_secret_variable_name_inventory_v1"
     )
     assert payload["status"] == "gitea_actions_secret_variable_name_inventory_ready"
     assert payload["ready"] is True
-    assert payload["summary"]["workflow_file_count"] == 14
+    assert payload["summary"]["workflow_file_count"] == committed_workflow_file_count
     assert payload["summary"]["referenced_secret_name_count"] == 26
     assert payload["summary"]["referenced_variable_name_count"] == 0
     assert payload["summary"]["secret_values_collected"] is False