ci: split test-and-sync into two workflows

Sync ArgoCD was an entry on every PR's check list (showing as
"skipping") because it lived in the same workflow as the pre-commit
test job, gated by an if condition. Split into two workflows so the
PR check list only contains the pre-commit run:

- test.yml — pre-commit on PR + push to main
- sync.yml — Sync ArgoCD on push to main only

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: xnoto

.github/workflows/test-and-sync.yml .github/workflows/sync.yml.github/workflows/test-and-sync.yml renamed to .github/workflows/sync.yml

@@ -1,40 +1,21 @@
 ---
-name: test-and-sync
+name: sync
 
 on:
   push:
     branches:
       - main
-  pull_request:
-    types: [opened, synchronize, reopened]
   workflow_dispatch:
 
 permissions:
   contents: read
 
 jobs:
-  test:
-    name: Pre-commit Tests
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Setup Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: "3.12"
-
-      - name: pre-commit tests
-        uses: pre-commit/action@v3.0.1
-
   sync:
     name: Sync ArgoCD
     # In-cluster runner; kubectl uses its auto-mounted SA token to talk to
     # the API directly. The tfroot-runner image has kubectl preinstalled.
     runs-on: arc-tf
-    needs: [test]
-    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
     steps:
       - name: Sync ArgoCD bootstrap Applications

.github/workflows/test.yml

@@ -0,0 +1,29 @@
+---
+name: test
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize, reopened]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Pre-commit Tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: pre-commit tests
+        uses: pre-commit/action@v3.0.1