ci(dogfood): the audit workflow is audited by our own action

[ThibautMelen]

The repo had ZERO CI while shipping the exact artifact class our GitHub Action audits. The loop closes: supernovae-st/nika-action@v1 (first-party · on its release tag per the house law) runs mode: test — static check + the offline golden (site-audit.nika.yaml.golden.json) — on every push/PR. Proven green locally before arming (shipped 0.104: 11 tasks · 5 waves · permits declared · 0 hints · golden match 3 keys). Grouped dependabot arms alongside (the nika-spec#135 lesson).

🤖 Generated with Claude Code

[github-actions]

✅ nika check — clean · site-audit.nika.yaml · 11 task(s) · 5 wave(s)

💰 cost floor ≥ $0.00 · ⚠ 1 unpriced/unbounded task(s) — never rendered as $0

• verdict · mock/echo · unpriced (NoPrice)

🔐 requires — models: mock/echo · all resolve in this engine · secrets: none

🌊 schedule — 5 wave(s), max width 5

budget note: --max-cost-usd stops NEW admissions — worst-case overshoot is one full wave (≤ 5 task(s) beyond the cap at the crossing). Tighten with max_parallel: when the budget is strict.

🔗 mock run — golden test passed (mock provider · offline)

_{nika 0.104.0 · report_version 1 · floor semantics: spend ≥ floor · what this checks}