Repository navigation

A deny rule naming a tool literally failed open when the name was also a glob #75

Job	Run time
build and check the distribution	23s
live tests stay opt-in	16s
test (py3.12)	3m 18s
test (py3.13)	2m 49s
lint	8s
test (py3.14)	3m 22s
	10m 16s