ci: warm shared workspace caches

[NWYLZW]

Summary

• Follow-up to ci: reduce redundant workflow work #415: main Quality no longer reruns tests, so this narrow trusted main workflow warms shared workspace caches when cache-key authority changes.
• Warms Linux x64 and macOS arm64 only; PR and Merge Queue refs remain consumers of main-scoped caches.
• The contract test parses the real hashFiles set and requires exact trigger equality.

Changelog

• Changelog path or "Not applicable": Not applicable (CI/CD optimization only)

Screenshots

Not applicable

Validation

• 37/37 targeted tests passed.
• node:test typecheck, changed ESLint, dprint, YAML parse, and git diff checks passed.
• Independent review: PASS, no P0-P3. Experience Review: PASS.
• Permissions are read-only for repository contents and actions cache; no tests, release, deployment, secrets, or environments are run.

Review Scope

• Risk: low
• Applicable profiles: workflow / cache policy
• Evidence: exact workspace cache authority paths and runner matrix are enforced by the contract test; the workflow uses the trusted main push trigger and the shared setup-workspace action.
• Rule exceptions: none
• Rollback: remove workspace-cache-warm.yml and its corresponding test and .github/AGENTS.md line.

Experience Review

• 已判断是否需要沉淀经验
• 如需要，已运行 $post-task-experience-review
• reviewer PASS / NOT APPLICABLE 后才进入 merge

Policy Conflict Review

• Independent read-only reviewer checked workflow, permission, and release-rule conflicts and reported PASS

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
oneworks-dev	Ready	Preview	Aug 22, 2026 7:42am

[github-actions]

Experience Review

Before merge, make sure the PR body contains this completed checklist:

## Experience Review
- [x] 已判断是否需要沉淀经验
- [x] 如需要，已运行 `$post-task-experience-review`
- [x] reviewer `PASS` / `NOT APPLICABLE` 后才进入 merge

Checklist to confirm:

• Decide whether this PR produced reusable project experience.
• If experience should be captured, run $post-task-experience-review.
• Merge only after the independent reviewer reports PASS or NOT APPLICABLE for the Experience Review Result.
• For workflow, permission, or release-rule documentation changes, also add this checked section to the PR body after an independent read-only conflict review:

## Policy Conflict Review
- [x] Independent read-only reviewer checked workflow, permission, and release-rule conflicts and reported PASS