Reference implementation of the CR-gating ruling 2026-09-06. Grep-safe env indirection (no injection through ${{ }} in shell). Standard: https://projects.knownelement.com/issues/820#note-1 Ticket: https://projects.knownelement.com/issues/820
Unambiguous if-form for the two-condition guard. CI (node:20-bookworm, Debian shellcheck 0.9) flags the A && B || C pattern where the koalaman stable docker path passed. No behavior change. CI evidence: https://git.knownelement.com/KNEL/ca/actions/runs/117821 Ticket: https://projects.knownelement.com/issues/784