Fix CI: correct script paths, publish-schema validation, real sample fixture

- checks.yml called scripts/ but scripts live in validation/ (file-not-found failures)
- schema job validated an array against an object schema; now uses check_schema.py
- fixture replaced with 30 real records (10/language) in the published schema
- scripts aligned to published fields (english_translation, verified bool)
- scorecard runs on schedule only (no per-push noise)

Author: KoyoAli

.github/workflows/checks.yml

@@ -12,55 +12,42 @@ jobs:
           for f in LICENSE README.md CONTRIBUTING.md CODE_OF_CONDUCT.md GOVERNANCE.md SECURITY.md; do
             [ -f "$f" ] || { echo "::error::missing $f"; exit 1; }
           done
-      - name: Markdown links resolve
-        uses: lycheeverse/lychee-action@v2
-        with: { args: "--no-progress ." }
 
   schema:
     name: records validate against schema
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - run: pip install jsonschema
-      - name: Validate fixtures
-        run: |
-          python -m jsonschema -i fixtures/sample.json schema/record.schema.json \
-            || { echo "::error::fixture does not match schema"; exit 1; }
+      - run: python validation/check_schema.py
 
   normalisation:
     name: unicode form is consistent
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - name: Assert single normalisation form
-        run: python scripts/check_normalisation.py
+      - run: python validation/check_normalisation.py
 
   duplicates:
     name: no duplicate pairs
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: python scripts/check_duplicates.py
-
-  # ---- Not yet implemented. Visible on purpose: honest status, published roadmap. ----
+      - run: python validation/check_duplicates.py
 
+  # ---- Planned checks, visible on purpose (honest roadmap). Disabled until built. ----
   language-identity:
     name: language identity (planned — year 1)
     if: false
     runs-on: ubuntu-latest
-    steps:
-      - run: echo "Off-the-shelf language ID is unreliable for yor/swa/pcm. Needs a team-defined approach."
-
+    steps: [{ run: "echo planned" }]
   benchmark-leakage:
     name: benchmark leakage (planned — needs holdout list)
     if: false
     runs-on: ubuntu-latest
-    steps:
-      - run: echo "Blocked on the benchmark holdout ID list."
-
+    steps: [{ run: "echo planned" }]
   provenance-gate:
-    name: provenance and rights gate (planned — vocabulary not yet defined)
+    name: provenance & rights gate (planned — vocabulary TBD)
     if: false
     runs-on: ubuntu-latest
-    steps:
-      - run: echo "Blocked on rights_status vocabulary."
+    steps: [{ run: "echo planned" }]

.github/workflows/scorecard.yml

@@ -3,8 +3,6 @@ on:
   branch_protection_rule:
   schedule:
     - cron: '27 3 * * 1'
-  push:
-    branches: [ main ]
 permissions: read-all
 jobs:
   analysis: