__NAME__ — one-line description of what this workflow checks.

Edit run to implement the check. It executes with the repository root
as the working directory and the EECO_* variables in the environment.
Exit codes: 0 clean, 1 finding, 2 blocked (a required tool is missing),
3 AI pass deferred (no --ai).