c3730c8cc6
Makefile targets per ROADMAP M1: build / vet / test / race / cover / check-cover / map / vm-proof. check-cover reports any package below a 70% floor (advisory — not yet a hard gate, since rotate/policy/tui are still below target). .gitea/workflows/ci.yml enforces the non-negotiable green bar on push/PR: build + vet + `go test -race ./...` on Go 1.25, installing bash+openssl for the self-contained test suite. Coverage floors are reported but not enforced until the lagging packages are lifted (ROADMAP M1). Remote is gitea only. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>