exec-aide's caller jobs are named python/typescript, so the org ruleset's
required 'ci / ci' status check never reported here and every PR was
merge-blocked for non-admins. The aggregator needs all real CI jobs and
fails if any failed or was cancelled.
* Add CI workflow and apply ruff formatting
* Disable cdk synth — PythonFunction requires Docker arm64 builds
The PythonFunction construct bundles via Docker with --platform
linux/arm64, which fails on GitHub Actions x86 runners. tsc --noEmit
still runs and catches TypeScript errors.