The template CI tried to re-harden from scratch in GitHub Actions, but
cf harden requires a TTY for Docker and the design takes 8+ hours.
Replace with a Verilator lint check. Hardening and precheck are run
locally on snoke; GDS/SPEF are uploaded via cf push.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>