ci: skip template-incompatible jobs when run on un-initialized template

CI.yaml's unit-tests job runs ./build.ps1 -Task Build,Test, which fails
on the template because Build's GENERATEMARKDOWN task imports
{{ModuleName}}/{{ModuleName}}.psd1 and {{GUID}} can't be parsed as a
valid Guid. PublishModuleToPowerShellGallery.yaml would, if it ever
fired against main with placeholder content, try to publish a literal
"{{ModuleName}}" module to PSGallery.

Add a job-level guard to both:

    if: hashFiles('CHANGELOG.template.md') == ''

CHANGELOG.template.md exists only pre-init (Initialize-Template.ps1
moves it onto CHANGELOG.md during init), so the marker flips on the
template / off downstream. The path contains no {{Placeholder}} token,
so init's substitution loop leaves the if-clause untouched in the
copied workflow files — downstream repos run all jobs normally.

The lint job in CI.yaml is left unchanged: Invoke-ScriptAnalyzer runs
fine on the template's placeholder folder. ggshield.yaml and
auto-merge-bots.yml are universal and need no guard.

Companion to PR #15 (template-level CHANGELOG.md / CalVer); reuses the
same marker the Manifest.tests.ps1 -Skip:$isTemplate logic uses there.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: tablackburn

.github/workflows/CI.yaml

@@ -56,6 +56,13 @@ jobs:
   unit-tests:
     name: Unit Tests (${{ matrix.os }})
     runs-on: ${{ matrix.os }}
+    # Skip on the un-initialized template — Build's GENERATEMARKDOWN task
+    # can't import the manifest while {{GUID}} is still a literal placeholder.
+    # Marker: CHANGELOG.template.md exists only pre-init; Initialize-Template.ps1
+    # moves it onto CHANGELOG.md during init, so downstream repos run the full
+    # job. Path has no placeholder token, so init's substitution loop leaves it
+    # intact in this file.
+    if: hashFiles('CHANGELOG.template.md') == ''
     strategy:
       fail-fast: false
       matrix:

.github/workflows/PublishModuleToPowerShellGallery.yaml

@@ -15,6 +15,9 @@ jobs:
   publish:
     name: Publish Module
     runs-on: ubuntu-latest
+    # Never publish the un-initialized template — the .psd1 still has
+    # {{ModuleName}} and {{GUID}} placeholders. Same marker as CI.yaml.
+    if: hashFiles('CHANGELOG.template.md') == ''
     steps:
       - name: Checkout
         uses: actions/checkout@v6