chore: M5 CI/Workflow Sweep - add blockers and contractile.just

Author: hyperpolymath

.github/workflows/ts-blocker.yml

@@ -1,14 +1,17 @@
 # SPDX-License-Identifier: PMPL-1.0-or-later
+name: TypeScript/JavaScript Blocker
+on: [push, pull_request]
+
 permissions:
   contents: read
 
-name: TypeScript/JavaScript Blocker
-on: [push, pull_request]
 jobs:
   check:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Block new TypeScript/JavaScript
         run: |
           NEW_TS=$(git diff --name-only --diff-filter=A HEAD~1 2>/dev/null | grep -E '\.(ts|tsx)$' | grep -v '\.gen\.' || true)

Justfile

@@ -2,6 +2,8 @@
 # https://github.com/casey/just
 
 # Default recipe (list available commands)
+import? "contractile.just"
+
 default:
     @just --list