Run the full local gate before publishing changes:
make check-fmt
make lint
make typecheck
make test
make crosshair
make crosshair analyses only bounded pure helper contracts. It intentionally
does not analyse filesystem traversal, ast.parse, TOML parsing, or the CLI.