Run every canary job weekly on Mondays

[jehrr]

Problem

The canary ran daily, and a second Monday cron (added earlier today in #11) was the only scheduled run allowed to start the paid part, through github.event.schedule gating. The owner's decision (2026-10-16) is now that every canary runs weekly, free and paid alike, which makes that gating pointless.

Resulting behaviour

• canary.yml has exactly one cron, "40 5 * * 1" (Mondays). The daily cron is removed.
• The github.event.schedule gate on the paid part is removed, so the Monday run and a manual dispatch run every job the same way.
• A job that needs a secret still fails with an ::error:: naming it when the secret is missing. Nothing else about the jobs changed.
• Comments and docs that said the canary runs daily (or every morning / the next day) now say weekly (Mondays). Dated, historical statements about earlier daily runs are left as they were.
• CHANGELOG: one CI-only line under [Unreleased] → Changed, replacing this morning's "paid canary weekly" line.

Files: .github/workflows/canary.yml, CHANGELOG.md.

Evidence

• Every edited workflow parsed with PyYAML: one schedule entry ("40 5 * * 1"), workflow_dispatch kept, no event.schedule reference and no job-level schedule if: left.
• CI (tests workflow) on the exact head commit is checked before merge.
• No canary was dispatched and no paid call was made.

Not changed

• Release/version: none. Dependabot and audit schedules are untouched.

🤖 Generated with Claude Code

https://claude.ai/code/session_01CKsd7q25N19WzUZjrAdzx8