cmd/

Command check-changie fails a feat/fix commit that ships no changelog fragment (and no `Changelog: skip` trailer), so nothing user-facing is missed from the release notes.

Command check-vuln runs govulncheck and fails CI on any advisory that affects our code, with one narrow exception: a documented allowlist of advisory IDs we have reviewed and accepted.

Command gen-docs renders the jira command tree into Markdown reference pages for the docs site.