The compiled binary's update-check tile hardcoded dualfroz/fxg with no way to override it, unlike the install scripts which already honor $VULP_REPO — a fork or a future repo rename needed a rebuild just to fix the tile. Also add .github/workflows/ci.yml (build + clippy -D warnings + test on push/PR): the only existing workflow was the tag-triggered release build, so nothing gated PRs before merge.