···8080"push" for that specific change in the current conversation. This includes
8181all remotes (origin, HTTPS via gh credentials, pair) and all branches.
82828383+Changes reach master through pull requests, not direct pushes: a ruleset on
8484+master requires a PR whose `ci` check (`.github/workflows/ci.yml`) passed.
8585+When the user says "push", push the branch and let GitHub merge it once CI
8686+is green:
8787+8888+```bash
8989+git fetch github && git rebase github/master
9090+git push github HEAD:<branch>
9191+gh pr create --base master --head <branch> --fill
9292+gh pr merge <branch> --auto --rebase --delete-branch
9393+```
9494+9595+`--rebase` keeps the individual commits on master. Only the user (repo admin)
9696+bypasses the ruleset. The update-pkgs bot merges its PRs through it as well,
9797+after dispatching farm.yml and ci.yml on them.
9898+8399## Machine Facts and Secrets via vars
8410085101- SSH public keys