Shallow clone (--depth 1) only gets default branch HEAD. PR SHA checkout fails silently (|| true), so all jobs run against wrong commit. Now fetches PR SHA explicitly before checkout. Closes #45