fix(workflows): reject hard-linked spilled input files

last month