Docs-only change: appends a new list item 3 "Spelling CI scope" to the
Markdown and Spelling section of CODESTYLE.md, propagating the
template's CODESTYLE Spelling-CI-scope rule (ptr727/ProjectTemplate#302,
#303). It documents that the CI spell-check gate covers README.md +
HISTORY.md only, not all markdown, with broad live checking left to the
cspell editor extension.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>

…up (#416)

Bumps the actions-deps group with 1 update:
[actions/setup-dotnet](https://github.com/actions/setup-dotnet).

Updates `actions/setup-dotnet` from 5.4.0 to 6.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-dotnet/releases">actions/setup-dotnet's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/752">actions/setup-dotnet#752</a></li>
<li>Bump actions/checkout from 6.0.3 to 7.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/751">actions/setup-dotnet#751</a></li>
<li>chore(deps): bump <code>@​actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/756">actions/setup-dotnet#756</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-dotnet/pull/756">actions/setup-dotnet#756</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-dotnet/compare/v5...v6.0.0">https://github.com/actions/setup-dotnet/compare/v5...v6.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-dotnet/commit/a98b56852c35b8e3190ac28c8c2271da59106c68"><code>a98b568</code></a>
chore(deps): bump <code>@​actions/cache</code> to 6.2.0 (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/756">#756</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/afb2931642fd907238eb71bce2da0dcc910b3553"><code>afb2931</code></a>
Bump actions/checkout from 6.0.3 to 7.0.0 (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/751">#751</a>)</li>
<li><a
href="https://github.com/actions/setup-dotnet/commit/6df8cefd1440cf9313e76b8fdb8aaf90cfa745a3"><code>6df8cef</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-dotnet/issues/752">#752</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-dotnet/compare/26b0ec14cb23fa6904739307f278c14f94c95bf1...a98b56852c35b8e3190ac28c8c2271da59106c68">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-dotnet&package-manager=github_actions&previous-version=5.4.0&new-version=6.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…417)

Implements the fleet hub drift finding (ProjectTemplate #330): earlier
downstream carries drifted from the current repo-config and merge-bot
reference.

## Repo-config carry refresh

- Rename `repo-config/ruleset-develop.json` and `ruleset-main.json` to
`develop.json` and `main.json`, matching the current fleet reference
layout (the fleet audit letter-checks the new paths).
- Refresh `README.md`, `configure.sh`, and `settings.json` to the
current reference content.

## Self-audit carry

- Add `AUDIT.md` at the repo root plus `spec/secrets.json` per the
repo-config Downstream Carry, adapted from the blessed Vantage-Config
reference for this repo's release model with the nuget-oidc and codecov
secret mechanisms.

## Merge-bot workflow sync

- Sync `.github/workflows/merge-bot-pull-request.yml` to the current
fleet reference: notably `gh pr merge` no longer uses `--delete-branch`,
and the header and comments are updated.

## Scope

Live rulesets, settings, and secrets were verified in sync with the
reference payloads today; this change touches committed files only. No
live repo configuration was modified.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>

Follow-up to the conformance audit for #387 (finding 1, analyzer
suppression hygiene).

## What prompted this

[CODESTYLE.md](../blob/develop/CODESTYLE.md) "Analyzer Suppressions"
names `dotnet_analyzer_diagnostic.severity` as the exact anti-pattern it
forbids -- relaxing a batch of rules repo-wide -- yet the root
`.editorconfig` carried it.

## What removing it surfaced

Exactly one rule, and none of it in shipping code:

| Rule | Sites | Project |
| --- | --- | --- |
| xUnit1051 | 29 | UtilitiesTests |

`Utilities` and `Sandbox` produced **zero** findings under
`AnalysisLevel=latest-all` + `AnalysisMode=All`. I re-ran with
`-p:EnforceCodeStyleInBuild=true` to confirm IDE analyzers were not
being silently skipped -- same result. The relaxation was hiding nothing
in library code.

xUnit1051 is a true positive, not a suppression candidate: it asks that
async calls in tests pass `TestContext.Current.CancellationToken` so
xUnit v3 can cancel a stalled test. The clearest case is
`DownloadAsyncTests`, which makes real network calls and previously had
no cancellation path if a request hung.

## Audit of every other suppression

Each was removed and rebuilt independently to prove it is load-bearing.
All of them are -- kept, no changes:

| Suppression | Scope | Fires when removed | Verdict |
| --- | --- | --- | --- |
| `CA1711` | Utilities | yes | Deliberate `Ex` suffix convention |
| `CA1707` | UtilitiesTests | yes | xUnit `Method_Scenario_Expected`
naming |
| `CA1515` | UtilitiesTests | yes | xUnit needs public test classes |
| `NoWarn IL3058` | Utilities, Sandbox | yes (10 under
`PublishAot=true`) | Polly/Serilog not annotated AOT-compatible; no
source location to scope |
| `IDE0055` | root | no | Inert today, but CSharpier owns formatting;
kept as a guard, now with a rationale comment |

The naming-rule severities were also raised to `warning` as a probe and
produced nothing.

## Verification

- `dotnet build -c Release` with `TreatWarningsAsErrors` intact: 0
warnings, 0 errors
- `dotnet test -c Release`: 183/183 passed
- `dotnet format style --verify-no-changes`: clean
- CSharpier + `dotnet format` Husky hooks passed on commit

## Notes

No `Closes #387` here -- per [AGENTS.md](../blob/develop/AGENTS.md)
"Branching Model", closing keywords belong in the `develop -> main`
promotion PR. #387's other three findings (inline pragmas,
`GlobalUsings.cs`, stale package source) were already resolved in
earlier work and need no change.

A fleet-wide issue is being filed against ProjectTemplate, since
LanguageTags carries the identical `dotnet_analyzer_diagnostic` line and
the other repos have not been probed.

Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>

Coverage has been uploaded to Codecov since the coverage workflow landed
(#377), but the README never surfaced it.

Adds a Coverage shield to the **Build Status** block, following the
badge pattern used in
[aiopurpleair](https://github.com/ptr727/aiopurpleair):

```markdown
[![Release Status][releasebuildstatus-shield]][actions-link]\
[![Last Commit][lastcommit-shield]][commits-link]\
[![Coverage][coverage-shield]][coverage-link]
```

Shield and link definitions were inserted in the file's existing
alphabetical order, between `commits-link` and `github-link`.

## Verification

- Shield URL returns HTTP 200 and renders real data (`coverage: 67%`),
not `unknown`
- markdownlint MD052 (undefined reference) clean -- both definitions
resolve
- CRLF preserved
- No `cspell.json` change needed: `codecov` is not flagged (aiopurpleair
carries the same badge with no dictionary entry), and README is in the
CI spell-check scope per CODESTYLE

Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>