PRs targeting dev branch (e.g. gandalf/docs-namespace-cleanup → dev)
were not triggering CI because the workflow on: filters only listed
main. This change adds 'dev' to both push and pull_request branch
filters on CI, and to the pull_request trigger on dual-approval.
Fixes PRI-526.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Calls the shared privilegedescalation/.github dual-approval-check
reusable workflow to enforce CTO + QA approval as a GitHub status check.
Once privilegedescalation/.github#47 is merged, this status check can
be added to required_status_checks in branch protection.
Co-Authored-By: Paperclip <noreply@paperclip.ing>