refactor: v3 (GH-158, GH-61) mkdocs-tacc theme, netlify deploys #5

	# Humans should not manage requirements.txt (bots do)
	name: Validate requirements.txt not changed by human

	on:
	pull_request:
	paths: ['requirements.txt']
	types: [opened, synchronize, reopened]
	branches-ignore: ['epic/v3']

	jobs:
	reject-requirements-drift:
	runs-on: ubuntu-latest

	# Skip if the last commit was from the bot (prevent unnecessary check)
	if: github.event.head_commit.author.name != 'github-actions[bot]'

	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	with:
	fetch-depth: 0 # full history

	- name: Check if requirements.txt was modified unexpectedly
	run: \|
	# For PRs, check against base branch
	# For pushes, check last commit
	if [ "${{ github.event_name }}" = "pull_request" ]; then
	BASE_REF="${{ github.event.pull_request.base.sha }}"
	COMPARE_RANGE="$BASE_REF...HEAD"
	else
	COMPARE_RANGE="HEAD~1..HEAD"
	fi

	# If requirements.txt modified in that range
	if git diff --name-only $COMPARE_RANGE \| grep -q "^requirements.txt$"; then
	echo "::error::You may NOT edit 'requirements.txt'"
	echo "::warning::Undo your changes to requirements.txt, so robot can maintain it."
	echo "::notice::To pin dependencies, use 'poetry add <package-name>'."
	exit 1
	fi

	echo "'requirements.txt' unchanged (or only changed by bot)"

Provide feedback