[tyhonchik]

Four fixes from today's app 1.41.0 and app-backend 0.41.0 releases, one commit each.

1. steps/workflow-guards — new composite action, fails on a job GitHub skips by surprise. Release 1.41.0 of aragon/app deployed without its production smoke tests and without the Completed flip: `validate` (dispatch only) was skipped, `deploy` ran on its `!cancelled()` guard, and `e2e` / `complete`, with no status function in their `if`, were skipped although `deploy` succeeded. A job with a skipped job anywhere in its `needs` chain is skipped unless its own `if` carries `always()`, `!cancelled()` or `failure()`. The action parses the jobs of every workflow in `dirs` (strict-subset reader, no dependencies, same policy as `lib/flatYaml.js`) and reports a job without a status function that depends on a job which carries one and has a skippable ancestor itself. Plain chains pass. Against aragon/app `main` it reports exactly the three jobs ci: guard the post-deploy jobs of the production workflows and check job guards on every PR app#1519 fixes; against app-backend `development` the two jobs ci: staging e2e on the opened release PR, job-guards check, repository in the skip note app-backend#1659 fixes. `ci.yml` runs it over this repo and `examples/`, the README states the rule. Both consumer PRs wire the step into their checks and stay red until this merges.
2. slack-notify — `*` list items (conventional-changelog style) reached Slack as literal asterisks; now they and nested items become `•` like `-` ones. New optional input `cut-link`: a message cut at Slack's 4,000 characters ends with `… the rest is in ` instead of `… (truncated)`. release-start / release-pr-refresh / release-pr-cancel pass the PR, release-complete the GitHub release (the raw tag works in the URL, also with `@` and `/`).
3. notify — the start and gate messages showed `Version` and `Ref` with the same tag on a production deploy; the Ref line is dropped when it repeats the version.
4. release-start — the skip note said `Release (release/) — skipped this week`; it now names the repository: `aragon/app-backend release (`release/`) — skipped this week`.

`contracts/interfaces.json` registers the new action and the new input.

🤖 Generated with Claude Code