The shared shell runner has no npm, so typecheck fails on every push.

Keep credentials, browser cache, and Cursor skills out of the repository so clones can run from .env.example and npm ci.