test(ci): enforce the setup-node cache policy - abandoned

[renovate]

Summary

The original setup-node v6 digest was superseded by #57. This PR keeps the v7 version now on main and adds a regression test for the repository’s existing setup-node cache policy.

• Check every setup-node invocation in every GitHub workflow, including newly added workflows or jobs.
• Require the automatic package-manager cache to be explicitly disabled and reject an explicit cache: input, which would otherwise turn it on independently.
• Keep caching disabled because this Python project invokes the published npm CLI and has no local npm package to cache with setup-node.

Validation

• 217 unit tests passed locally (10 platform-specific skips on macOS).
• Exercised two valid false forms and six deliberately unsafe or uncovered workflow cases; all produced the expected result.
• Ruff lint/format, actionlint, and git diff --check passed.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-18T19:07:48.743050Z	507464f	New commits
🔒 Security Review	✅ Completed 2026-09-18T19:07:59.407382Z	507464f	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.