fix(managed-files-guard): drop the caller checkout step once ci-workflows#881 is released #897

Refs melodic-software/claude-code-plugins#4186. Blocked by melodic-software/ci-workflows#881 and the ci-workflows release that carries it.

Problem

The managed-files-guard component runs its own consumer actions/checkout (fetch-depth: 0) before the check-managed-files composite action (components/managed-files-guard/managed-files-guard.yml:104-110, and managed-files-guard-fleet.yml). ci-workflows#881 moves that checkout into the action and keeps callers that still check out working, so once its release ships the component's step is redundant.

Fix

Drop the caller's actions/checkout step from:

• components/managed-files-guard/managed-files-guard.yml
• components/managed-files-guard/managed-files-guard-fleet.yml

Bump the pinned ci-workflows ref to the release that carries #881 in the same change.

Done when

• Neither file contains an actions/checkout step.
• Both files pin a ci-workflows ref at or after the release carrying feat(runner-policy): register the ci-workflows v0.65.12 intake-triage and pr-review-cli contracts #881.
• A managed-files guard run in a consumer repository passes on the new component.

🤖 Generated with Claude Code