How I moved monthly data refreshes, audits and a daily AI review off a laptop that was often closed, onto GitHub Actions: measuring access first, secrets that never pass through the assistant, one lock and a tested calendar, state kept in git, and the risk review that should have come before the merge.