ci: block on macOS failures and run every pull request in full

The macOS suite jobs reported without blocking until they had green
runs on a hosted runner. #1, #2 and #3 ran them green on Node 22 and 24.
A red macOS job now fails the run. Pull requests no longer skip
prose-only changes, because the docs freshness job lives in this
workflow and a required check that never reports blocks the merge.
Pushes keep the prose filter.

Author: Portll

.github/workflows/ci.yml

@@ -34,14 +34,9 @@ on:
       - '!**/*.md'
       - '!docs/**'
       - '**/test/fixtures/**'
+  # Every pull request runs in full, prose-only ones included: the docs job lives in this file, and a
+  # required check that never reports blocks the merge.
   pull_request:
-    # Skip pushes that change only prose. Test fixtures are markdown too, so they are re-included last
-    # (later patterns win). Measured 2026-09-18: 287 CI runs in 35 days, most pushes to main.
-    paths:
-      - '**'
-      - '!**/*.md'
-      - '!docs/**'
-      - '**/test/fixtures/**'
 
 # A newer push to the same ref cancels the run it supersedes; only the latest commit's result is read,
 # and every superseded minute is billed on a private repository.
@@ -66,9 +61,6 @@ jobs:
         os: [ubuntu-latest, macos-latest]
         node: ['22', '24']
     runs-on: ${{ matrix.os }}
-    # macOS has never run this suite on a hosted runner. It reports without blocking until its first
-    # measured green runs; then this line goes. Linux stays required.
-    continue-on-error: ${{ matrix.os == 'macos-latest' }}
     timeout-minutes: 30
     steps:
       # Actions pinned to commit SHAs, not tags: a tag can be silently repointed by the action

package.json

@@ -1,6 +1,6 @@
 {
   "name": "commitwork",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "description": "Repository security scanner, local CI runner and scheduled monitor, with remediation and compliance-evidence tooling. Manifest-driven; runs against any git repository.",
   "type": "module",
   "bin": {