The template CI tried to re-harden from scratch in GitHub Actions, but cf harden requires a TTY for Docker and the design takes 8+ hours. Replace with a Verilator lint check. Hardening and precheck are run locally on snoke; GDS/SPEF are uploaded via cf push. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>