docs: fix README CI/CD workflow documentation and test commands

[Copilot]

README lacked a structured explanation of the actual CI/CD workflows (sync.yml, bandit.yml, codacy.yml) and the Testing/Release sections used pip install pytest + bare pytest — inconsistent with dev deps living in pyproject.toml optional-dependencies.

Changes

• CI/CD Workflows table — added ### CI/CD Workflows subsection under the existing ## CI/CD & Dependency Caching section, listing each workflow file with its trigger and purpose:

  Workflow	File	Trigger	Purpose
  Sync	sync.yml	Daily 02:00 UTC, manual dispatch	Runs main.py to sync Control D folders
  Bandit	bandit.yml	Push/PR to main, weekly	Python security vulnerability scanning
  Codacy	codacy.yml	Push/PR to main, weekly	Code quality analysis + SARIF upload

• Testing commands — replaced pip install pytest pytest-mock pytest-xdist + bare pytest tests/ with uv sync --all-extras + uv run pytest tests/ across the Testing and Release Process sections, matching the actual dev dependency setup in pyproject.toml.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[Code Quality] Fix README reference to non-existent ci.yml workflow</issue_title>
<issue_description>### Description

The README.md references .github/workflows/ci.yml which doesn't exist in the repository. This creates confusion for contributors trying to understand the CI/CD setup.

Problem

From the Backlog Burner discussion (#221) and QA Report (#337):

• README mentions .github/workflows/ci.yml
• This workflow file doesn't exist
• Actual CI workflows are sync.yml, bandit.yml, codacy.yml

Current State

Documentation references a non-existent workflow file, causing confusion about which workflows handle CI validation.

Suggested Changes

1. Replace ci.yml references with actual workflow names:

   • Use sync.yml for main build/test workflow
   • Mention bandit.yml for security scanning
   • Reference codacy.yml for code quality checks

2. Add CI/CD section to README explaining the workflow structure:

   ### CI/CD Workflows
   - **sync.yml**: Main synchronization workflow
   - **bandit.yml**: Security vulnerability scanning  
   - **codacy.yml**: Code quality analysis

3. Update any workflow status badges to point to correct workflows

Files Affected

• README.md (search and replace ci.yml references, add CI/CD section)

Success Criteria

• ✅ All workflow references point to files that exist
• ✅ CI/CD section clearly explains workflow purposes
• ✅ Status badges (if any) link to correct workflows
• ✅ No broken links in README

Priority

Medium - Documentation accuracy for contributors

Effort Estimate

10 minutes (search/replace + brief documentation addition)

Source

Extracted from Daily Backlog Burner discussion abhimehro/ctrld-sync#221 and QA Report abhimehro/ctrld-sync#337

🔍 Task mining by Discussion Task Miner - Code Quality Improvement Agent

To install this workflow, run gh aw add github/gh-aw/.github/workflows/discussion-task-miner.md@94662b1dee8ce96c876ba9f33b3ab8be32de82a4. View source at https://github.com/github/gh-aw/tree/94662b1dee8ce96c876ba9f33b3ab8be32de82a4/.github/workflows/discussion-task-miner.md.

• expires on Feb 20, 2026, 5:44 AM UTC

Comments on the Issue (you are @copilot in this section)

Custom agent used: Development Partner
The Development Partner Protocol

• Fixes [Code Quality] Fix README reference to non-existent ci.yml workflow #366

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

[github-actions]

👋 Development Partner is reviewing this PR. Will provide feedback shortly.

[github-actions]

👋 Development Partner is reviewing this PR. Will provide feedback shortly.

[Copilot]

Pull request overview

This PR enhances the README documentation by adding a structured CI/CD workflows table and updating all testing commands to use the uv dependency manager, improving consistency with the project's actual CI configuration and dependency management approach.

Changes:

• Added a CI/CD Workflows subsection with a comprehensive table documenting sync.yml, bandit.yml, and codacy.yml workflows, including their triggers and purposes
• Replaced all test command examples from pip install pytest pytest-mock pytest-xdist + bare pytest to uv sync --all-extras + uv run pytest, aligning with pyproject.toml's optional dependencies structure and the performance.yml workflow pattern