chore: configure releases and develop workflow

test-workspace-tracking.py

@@ -15,8 +15,26 @@ def check(ignore_rules):
             )
 
         git("init", "--quiet")
-        allowed = {".gitignore", "AGENTS.md", "README.md", "test-workspace-tracking.py"}
+        allowed = {
+            '.gitea/workflows/commits.yml',
+            '.gitea/workflows/security.yml',
+            '.gitea/workflows/verify.yml',
+            '.gitignore',
+            '.nvmrc',
+            '.release-it.json',
+            'AGENTS.md',
+            'CHANGELOG.md',
+            'README.md',
+            'commitlint.config.cjs',
+            'package-lock.json',
+            'package.json',
+            'renovate.json',
+            'scripts/check-release.cjs',
+            'test-release.cjs',
+            'test-workspace-tracking.py',
+        }
         for name in allowed:
+            (root / name).parent.mkdir(parents=True, exist_ok=True)
             (root / name).write_text("fictional fixture\n")
         (root / ".gitignore").write_text(ignore_rules)
         for name in ("frontend", "backend", "docs", "specs"):
@@ -29,6 +47,8 @@ def check(ignore_rules):
             "private.db-wal", ".env", ".env.example", "audit.pdf",
             "design/preview.html", "todo/notes.md", "references/source.md",
             ".agents/local.md", "unknown-directory/data.txt", "unknown-file.txt",
+            "scripts/private.txt", ".gitea/private.txt", ".gitea/workflows/private.yml",
+            "node_modules/private.txt",
         ):
             target = root / name
             target.parent.mkdir(parents=True, exist_ok=True)