[v2.3][Epic] CI / Supply Chain Stabilization

[JasonEran]

Goal

Make CI reliable: workflows trigger only when needed and consistently pass.

Reference

• Current CI failures: SLSA/SBOM/Syft/Git exit code issues

[JasonEran]

CI/Supply-chain epic closure update:

• Child issue [CI] Restrict workflow triggers (paths filters + workflow_dispatch) #46 closed with workflow trigger restrictions (paths + workflow_dispatch).
• Child issue [CI] Fix supply-chain workflows (SLSA/SBOM/Syft permissions) #47 closed with supply-chain hardening and validated SBOM/SLSA success evidence.
• Delivery PR: [v2.3][CI] Stabilize supply-chain triggers + action versions #50
• Merge commit: 52b6597

Manual validation runs (feature/v2.3):

• Supply Chain: https://github.com/JasonEran/Aether-Guard/actions/runs/22387405901
• SLSA Source Provenance: https://github.com/JasonEran/Aether-Guard/actions/runs/22387406761

Epic #14 is now complete and can be closed.