Remove stale PRODUCTION_CHECKLIST.md, ignore md changes in CI

- Delete PRODUCTION_CHECKLIST.md (nearly all items done, remaining
  ops tasks tracked elsewhere)
- Update paths-ignore in ci.yml, security.yml, scorecard.yml to
  skip runs on markdown-only changes (**/*.md)
- Remove checklist reference from CLAUDE.md

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: GraysonCAdams

.github/workflows/ci.yml

@@ -4,11 +4,11 @@ on:
   push:
     branches: [main]
     paths-ignore:
-      - '*.md'
+      - '**/*.md'
   pull_request:
     branches: [main]
     paths-ignore:
-      - '*.md'
+      - '**/*.md'
   workflow_dispatch:
 
 concurrency:

.github/workflows/scorecard.yml

@@ -10,6 +10,8 @@ name: Scorecard
 on:
   push:
     branches: [main]
+    paths-ignore:
+      - '**/*.md'
   schedule:
     # Weekly scan on Sunday at midnight UTC
     - cron: "0 0 * * 0"

.github/workflows/security.yml

@@ -8,8 +8,12 @@ name: Security
 on:
   pull_request:
     branches: [main]
+    paths-ignore:
+      - '**/*.md'
   push:
     branches: [main]
+    paths-ignore:
+      - '**/*.md'
   schedule:
     # Weekly scan on Monday at midnight UTC to catch new CVEs
     - cron: "0 0 * * 1"

CLAUDE.md

@@ -250,8 +250,5 @@ Steps 1-4 run automatically via the Husky pre-push hook. **Step 5 (CodeQL) must
 
 ## Remaining Production Tasks
 
-See [PRODUCTION_CHECKLIST.md](PRODUCTION_CHECKLIST.md) for full status. Outstanding items:
-- Rotate all secrets for production
-- Choose Postgres provider (Neon / Supabase / Fly Postgres), provision DB, run migrations
 - Rewrite `seed.ts` to use Drizzle ORM (still uses raw better-sqlite3)
 - Configure database backups