[DO NOT MERGE] Phase 2.1: rest-only path-trigger test (#1756)

[lachen-nv]

Phase 2 validation — scenario 2.1: rest-only path trigger

Throwaway PR for #1756 / #1800 Phase 2 validation. Will be closed without merging.

Setup: branch off chore/rest-ci-test (PR #1800 HEAD = 590d19e4) + one commit adding rest-api/PHASE2_TEST.md.

Expected behavior:

• Core CI (Carbide CI) — changes gate evaluates run_core_ci=false → prepare skips → all downstream core jobs SKIPPED
• carbide-ci-pass aggregator — runs (if: always()), sees all needs as SKIPPED, reports SUCCESS
• REST CI (NICo REST CI) — changes gate evaluates run_rest_ci=true → runs end-to-end
• rest-ci-pass aggregator — reports SUCCESS

Verifies that job-level path gating correctly isolates rest-only changes from core pipeline.

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[lachen-nv]

/ok to test 853c7775e2d50a3a16f1d2c19b40c91d4f1e22a3

[lachen-nv]

/ok to test 853c777 (prior comment had a typo'd SHA)

[github-actions]

🔐 TruffleHog Secret Scan

✅ No secrets or credentials found!

Your code has been scanned for 700+ types of secrets and credentials. All clear! 🎉

🔗 View scan details

_{🕐 Last updated: 2026-05-21 05:39:11 UTC | Commit: 853c777}

[github-actions]

🔍 Container Scan Summary

Service	Total	Critical	High	Medium	Low	Other
nico-flow	66	4	34	18	2	8
nico-nsm	82	2	28	43	9	0
nico-psm	67	4	35	18	2	8
nico-rest-api	100	6	53	30	3	8
nico-rest-cert-manager	65	4	34	18	1	8
nico-rest-db	66	4	34	18	2	8
nico-rest-site-agent	65	4	34	18	1	8
nico-rest-site-manager	65	4	34	18	1	8
nico-rest-workflow	67	4	35	18	2	8
TOTAL	643	36	321	199	23	64

Per-CVE detail lives in the per-service grype-* artifacts (JSON + SARIF). Severity counts only — no CVE IDs published here.