A job-level `if:` is evaluated before the job's environment is resolved, so
every `vars.PRODUCTION_*` / `vars.STAGING_*` check in one reads empty in this
repository and would skip the job with no failing run to notice. The five
job-level checks are removed; each variable is still read where it is used, in
the authentication step that resolves it.
The multi-target gate loses its whole mode branch: with both identity clauses
gone the two arms are exhaustive, so only the branch check remains.
CODEOWNERS claims the workspace, the cloud-* workflows, and the lease action.
Jinwoo-H
97ab77ca52