sakthai-devops-ci

Run the full local gate before pushing: pytest, ruff check, ruff format --check, mypy, bandit. Push to a branch, open a PR, and watch CI with gh run watch. Don't merge on red.