Workflow-only edits shouldn't pay for the multi-minute MariaDB/integration/harness suite. A negation '- !.gitea/**' (ordered after the yml/yaml globs) makes CI-config- only PRs resolve code=false so api/harness skip like docs. fast-checks (format:check still validates the workflow YAML) + gate continue to gate them. PRs that also touch app code or lockfile still resolve code=true and run the full suite.