(CAT-2665) Fork CI test PR

[LukasAud]

This is a test PR opened from a fork to verify the safe fork CI integration introduced in #438.

Expected behaviour:

• Fork CI Label Guard strips the allowed-for-ci label on each new push
• Acceptance tests do not run until the allowed-for-ci label is applied
• Once labelled, Acceptance runs via the pull_request_target path

🤖 Generated with Claude Code

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[LukasAud]

Testing concluded