When working on or commenting on security, check first file ./agents/security.md.
When editing .github/workflows/*.yml, see ./agents/github-actions-security.md.
Bash style guide (variables, printf, locals, traps, sourcing, has,
shellcheck targets, ...) is hosted canonically in
developer-meta-files:agents/bash-style-guide.md.
We do not duplicate it.