fix(ci): restore regression coverage and reduce duplicate runs

[Iron-Mark]

Summary

• run the full security regression suite in the required PR job
• remove duplicate Cursor Integration push runs and limit CodeQL push scanning to main
• cancel superseded Cursor Integration and CodeQL runs
• repair stale audit-flow and mobile-navigation E2E assertions
• increase the live API integration timeout to tolerate shared-runner contention
• retain the Next.js-generated agent guidance so local dev no longer dirties the tree

Local verification

• npm ci (0 vulnerabilities)
• npm run lint
• npm run test:security (401/401)
• npm run build (109 routes)
• node --test test/audit-flow-e2e.test.mjs test/site-header-nav-e2e.test.mjs (4/4)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
hireproof	Ready	Preview	Sep 5, 2026 9:07am UTC