pub fn annotations(report: &Report, no_fail: bool) -> String
Render the report as GitHub workflow annotations, one per copy to remove. They need no token, so a fork pull request still shows them anchored in the diff.