service-automation: refuse a CEL envelope in a z.string() predicate slot at build time
#4888
os-warrensingle-claim-path-guard.yml
on: pull_request
No other open PR may claim the same single-writer path
16s