Merge origin/main into gsta203-pr4-oxlint-ratchet (rule 19 grant)

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

# Conflicts:
#	docs/ship-policy.md

.github/workflows/free-tests.yml

@@ -37,7 +37,7 @@ on:
 # push runs never see workflow_dispatch inputs, so free-plan resolves these
 # (or a dispatch override) into outputs that free-suite reads.
 env:
-  FREE_SUITE_RUNNER: ubicloud-standard-2
+  FREE_SUITE_RUNNER: ubicloud-standard-4
   FREE_SUITE_SHARDS: '20'
 
 # Keyed on the PR number, not head_ref: a bare branch name carries no fork