ci: single-source the Hugo version via .hugoversion + auto-bump (clos… #12
security.yml
on: push
Secret scan (gitleaks)
4s
Workflow audit (zizmor)
9s