Sync workstation helpers and preserve baseline deployment

tests/smoke.sh

@@ -22,8 +22,8 @@ fi
 
 python3 "$ROOT_DIR/tests/test_llama.py" || failures=$((failures + 1))
 
-if rg -n --hidden --glob '!tests/smoke.sh' --glob '!tests/test_llama.py' --glob '!.git/**' \
-   '(TELEGRAM_BOT_TOKEN|SIGNAL_ACCOUNT|API_KEY)=("|'"'"')?[A-Za-z0-9+]' "$ROOT_DIR"; then
+if (cd -- "$ROOT_DIR" && rg -n --hidden --glob '!tests/smoke.sh' --glob '!tests/test_llama.py' --glob '!.git/**' \
+   '(TELEGRAM_BOT_TOKEN|SIGNAL_ACCOUNT|API_KEY)=("|'"'"')?[A-Za-z0-9+]' .); then
   printf 'Möglicher eingecheckter Secret-Wert gefunden.\n' >&2
   failures=$((failures + 1))
 fi