/// Core lint command runner (phase orchestration + the public Lint command).
/// Lint's rule identity (`RuleName`), the `Rule` trait, `Context`, and the lint
/// `Diagnostic`/`Report` aliases over the shared diagnostics vocabulary.
/// Runs shellcheck over bash/sh `run:` bodies and surfaces its findings.
/// Detects workflows where the pinned SHA does not match the lock file.
/// Detects stale version comments that no longer match the locked version.
/// Detects actions used without a pinned SHA.
/// Detects actions present in workflows but missing from the manifest.
/// Workflow-security rule family (permissions, triggers, secrets, concurrency).
/// Workflow-validity rule family (dangling references, unresolved expressions).
pub use ;
pub use ;