A practitioner guide to running HIPAA-aligned pipelines on GitHub Actions: OIDC trust scope, self-hosted runner discipline, reusable workflows as the compliance contract.
