fix: add K9! magic number and upgrade runner for tomllib

Author: hyperpolymath

.github/workflows/dogfood-gate.yml

@@ -21,7 +21,7 @@ jobs:
   # ---------------------------------------------------------------------------
   a2ml-validate:
     name: Validate A2ML manifests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository
@@ -65,7 +65,7 @@ jobs:
   # ---------------------------------------------------------------------------
   k9-validate:
     name: Validate K9 contracts
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository
@@ -114,7 +114,7 @@ jobs:
   # ---------------------------------------------------------------------------
   empty-lint:
     name: Empty-linter (invisible characters)
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository
@@ -178,7 +178,7 @@ jobs:
   # ---------------------------------------------------------------------------
   groove-check:
     name: Groove manifest check
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository
@@ -236,7 +236,7 @@ jobs:
   # ---------------------------------------------------------------------------
   eclexiaiser-validate:
     name: Validate eclexiaiser manifest
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout repository
@@ -299,7 +299,7 @@ jobs:
   # ---------------------------------------------------------------------------
   dogfood-summary:
     name: Dogfooding compliance summary
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [a2ml-validate, k9-validate, empty-lint, groove-check, eclexiaiser-validate]
     if: always()
 

container/deploy.k9.ncl

@@ -1,3 +1,4 @@
+K9!
 # SPDX-License-Identifier: MPL-2.0
 # deploy.k9.ncl — cloudguard-cli deployment component (Hunt level)
 #