ci fixes

Author: jhheider

.github/workflows/agent-boundary-check.yml

@@ -33,6 +33,8 @@ jobs:
 
           for f in "${CHANGED[@]}"; do
             [ -f "$f" ] || continue
+            # Don't scan CI/workflow files
+            [[ "$f" == .github/* ]] && continue
             case "$f" in
               *.md|*.txt|*.yml|*.yaml|*.json|*.toml|*.ts|*.tsx|*.js|*.jsx|*.sh|*.py|*.rb|*.tf|*.hcl)
                 if grep -Einq "$FORBIDDEN" "$f"; then

.github/workflows/quality-gate.yml

@@ -20,6 +20,7 @@ jobs:
       - uses: dorny/paths-filter@v3
         id: filter
         with:
+          list-files: shell
           filters: |
             source:
               - '**/*.ts'
@@ -33,6 +34,8 @@ jobs:
               - '**/*.sh'
               - '!**/*.test.*'
               - '!**/*.spec.*'
+              - '!.github/**'
+              - '!**/*.md'
             tests:
               - '**/*.test.*'
               - '**/*.spec.*'
@@ -44,9 +47,15 @@ jobs:
     if: needs.changed-files.outputs.source_changed == 'true'
     runs-on: ubuntu-latest
     steps:
+      - name: Report changed files
+        run: |
+          echo "Source files changed: ${{ needs.changed-files.outputs.source_changed }}"
+          echo "Test files changed: ${{ needs.changed-files.outputs.tests_changed }}"
+
       - name: Require test updates when source changes
         run: |
           if [ "${{ needs.changed-files.outputs.tests_changed }}" != "true" ]; then
-            echo "Source files changed without accompanying test changes."
+            echo "::error::Source files changed without accompanying test changes."
+            echo "Note: .md, .github/*, and test files are excluded from source filter."
             exit 1
           fi