Contributing Run validation, privacy scan and tests before PR. Do not add secrets or external side effects by default.