fix(ci): skip CI on conformance-only pushes to main

Push events that only change repo-root conformance-certificate.json and
conformance-report.json no longer start the full workflow, so cert-bot
artifact commits do not churn main or pile extra runs behind open PRs.
pull_request triggers are unchanged.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: 2 people

.github/workflows/ci.yml

@@ -3,6 +3,11 @@ name: CI
 on:
   push:
     branches: [main, master]
+    # Cert-bot follow-up commits only touch these files; skip full CI so `main` does not
+    # churn behind open PRs (and avoid re-entering publish when actor guards drift).
+    paths-ignore:
+      - "conformance-certificate.json"
+      - "conformance-report.json"
   pull_request:
 
 concurrency: