forgetest: the lint's docstrings and its row reason say what it reads, not what a workflow runs on

host_row_problems' docstring gave the reason a row is listed as "a
dispatch, a call or a schedule runs on no change". A workflow on
workflow_call alone runs on every run of the workflow that calls it
(forgeext's package.yml is one); the lint lists it because it does not
follow a call to its caller. The reason it printed, "<ci> runs on no
push or pull request", was false the same way for such a workflow, and
for a flow mapping (`on: {push: ...}`) that names push. The docstrings
of _on_every_run and workflow_runs said that a step under an `if:`
other than true does not run on every run, where the lint evaluates no
condition: a step under `always()` or `success()` runs on every run and
still counts as no step. The Test page of the site says each of these
as the lint applies it.

The docstrings now say what the lint reads: a row is listed when the
workflow's own `on:` names neither push nor pull_request as the lint
reads it (a dispatch, a call or a schedule alone, a call not followed
to its caller, a flow mapping), and a step with a condition counts as
no step because the lint evaluates none. The row's reason reads "<ci>:
the lint reads no push or pull_request in its own on:". The comments
of the two cases that hold these rules say the same. No rule changes:
the same rows are listed, for the same workflows.

Proof: forgetest-ci "Unit tests" (`python -B -m unittest discover -s
tests -v` in forgetest): test_manifest.py runs 39 tests, OK, on Windows
with python 3.14 and on Ubuntu 24.04 with python 3.12, with
test_the_workflow_has_to_run_the_host_test asserting the new reason. A
probe of host_row_problems: a workflow on workflow_call alone and one
whose flow-mapping `on:` names push are each listed with the new
reason, and a plain `on: [push]` one is not. The coverage lint on the
tree manifest from the recipe pins reports 0 uncovered paths, 0
host-tested row problems, 43 tests. pyflakes reports no undefined name.

Acceptance: none. forgetest is dev-only and in no fingerprint (the
source_sha of 43 of 43 tests is unchanged); the lint runs in CI, not in
a campaign, and tests/ are in no fingerprint.

forgetest/tests/test_manifest.py

@@ -242,7 +242,7 @@ class CoverageReportTests(unittest.TestCase):
         self.assertEqual(m.host_row_problems(man, [runs], root=root, sources=None), [])
         self.assertEqual(m.host_row_problems(man, [idle], root=root, sources=None),
                          [(idle[0], idle[1], idle[2], ci + " does not run it")])
-        # a workflow that runs on no push or pull request runs it on no change, and a step whose
+        # a workflow whose own on: names neither push nor pull_request is listed, and a step whose
         # failure the run tolerates does not run it
         job = "jobs:\n  test:\n    steps:\n      - uses: actions/checkout@v4\n      - run: python3 scripts/bench/stream_test.py\n"
         root = self._root({"scripts/bench/stream_test.py": "",
@@ -252,7 +252,7 @@ class CoverageReportTests(unittest.TestCase):
         manual = runs[:3] + ("forgefirm:.github/workflows/manual.yml",)
         soft = runs[:3] + ("forgefirm:.github/workflows/soft.yml",)
         self.assertEqual(m.host_row_problems(man, [manual, soft], root=root, sources=None),
-                         [manual[:3] + (manual[3] + " runs on no push or pull request",),
+                         [manual[:3] + (manual[3] + ": the lint reads no push or pull_request in its own on:",),
                           soft[:3] + (soft[3] + " does not run it",)])
 
     def _runs(self, yml, path):
@@ -320,7 +320,8 @@ class CoverageReportTests(unittest.TestCase):
     def test_a_step_counts_only_when_every_run_of_the_workflow_runs_it_and_its_failure_fails_the_run(self):
         step = "steps:\n  - name: x\n%s    run: ./build/tray_test\n"
         test = "tests/tray_test.c"
-        # a step under an if: runs it on some runs, not every run; literally true is no condition
+        # the lint evaluates no condition: an if: other than the literal true counts as no step,
+        # always() included; literally true is no condition
         self.assertFalse(self._runs(step % "    if: false\n", test))
         self.assertFalse(self._runs(step % "    if: github.event_name == 'push'\n", test))
         self.assertFalse(self._runs(step % "    if: ${{ always() }}\n", test))