Address Copilot review on PR #89

Three findings, all addressed:

- Path globs: \`**.py\` doesn't actually match nested subdirs in
  GitHub Actions glob semantics — it behaves like \`*.py\`. Switch
  to \`**/*.py\` so changes under src/communitymech/<subpkg>/ (like
  network/, validators/, embedding/) trigger the workflow.
- Push trigger had no \`paths:\` filter, so the workflow ran on
  every commit to main. Mirror the pull_request path list via a
  YAML anchor (&trigger_paths + *trigger_paths) so the two stay in
  sync.
- uv sync: switch to \`--frozen --all-extras\` so the workflow fails
  if uv.lock is stale (instead of silently re-resolving) while
  keeping the dev/test extras the existing network-quality.yml
  uses. Also added uv.lock + tests/**/*.py to the trigger paths so
  dependency and test changes re-run the workflow.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: realmarcin

.github/workflows/validate-strict.yaml

@@ -2,16 +2,19 @@ name: validate-strict
 
 on:
   pull_request:
-    paths:
+    paths: &trigger_paths
       - "kb/communities/**"
       - "src/communitymech/schema/**"
-      - "src/communitymech/**.py"
-      - "scripts/**.py"
+      - "src/communitymech/**/*.py"
+      - "scripts/**/*.py"
+      - "tests/**/*.py"
       - "justfile"
       - "pyproject.toml"
+      - "uv.lock"
       - ".github/workflows/validate-strict.yaml"
   push:
     branches: [main]
+    paths: *trigger_paths
   workflow_dispatch:
 
 permissions:
@@ -37,7 +40,11 @@ jobs:
           enable-cache: true
 
       - name: Install dependencies
-        run: uv sync --all-extras
+        # --frozen fails the workflow if uv.lock is stale (don't silently
+        # re-resolve in CI). --all-extras keeps parity with the existing
+        # network-quality.yml workflow and ensures pytest + optional deps
+        # are available for the test step below.
+        run: uv sync --frozen --all-extras
 
       - name: Run validate-strict (closed-schema LinkML validation)
         run: just validate-strict