Add explicit branch targeting to merge_group triggers

[Copilot]

GitHub Actions workflows with merge_group triggers were not running in the merge queue, remaining in "expected" state indefinitely. The merge_group event requires explicit branch specification to trigger properly.

Changes

All workflows:

• Added branches: [main] to merge_group and pull_request triggers
• Added workflow_dispatch for manual testing
• Added explicit permissions blocks (security hardening)

claude-code-test.yml:

• Added pr-check job (runs on PRs only, always passes)
• Existing integration jobs already had correct merge_group || workflow_dispatch conditions

cla.yml:

• Added merge-queue-pass job (runs on merge_group || workflow_dispatch, always passes)
• Updated cla-check job condition to exclude workflow_dispatch

validate.yml:

• No job changes needed (runs unconditionally)

Example

Before:

on:
  pull_request:
  merge_group:

After:

on:
  pull_request:
    branches: [main]
  merge_group:
    branches: [main]
  workflow_dispatch:

permissions:
  contents: read

Jobs use event-based conditionals:

jobs:
  merge-only-job:
    if: github.event_name == 'merge_group' || github.event_name == 'workflow_dispatch'

Original prompt

None of the github actions are running in the merge queue for any PRs. For example #41 has all the actions just saying "expected". Fix the CI action setup

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you all sign our Developer Certificate of Origin before we can accept your contribution. You can sign the DCO by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

1 out of 2 committers have signed the DCO.
✅ (nhorton)[https://github.com/nhorton]
❌ @Copilot
_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the DCO Assistant Lite bot.}