Currently all changes push directly to main. Move to branch-based PRs as the project scales.
Workflow: `feat/`, `fix/`, `chore/`, `test/` branches → PR → CI must pass (`.github/workflows/ci.yml` already runs on PRs) → merge.
Not yet: GitHub branch protection rules — enable when ready to enforce.