Tighten lint workflow scope

.github/workflows/lint.yaml

@@ -3,7 +3,7 @@ name: lint
 on:
   push:
     branches:
-      - '**'
+      - "**"
   pull_request:
   workflow_dispatch:
 
@@ -17,11 +17,22 @@ jobs:
       - name: Check formatting with Prettier
         shell: bash
         run: |
+          mapfile -t prettier_files < <(
+            git ls-files \
+              | grep -E '\.(md|json|ya?ml|html|css)$' \
+              | grep -Ev '^(\.docs/|\.zed/|errorpages/html/|homepages/(forust_files|xdfnx_files)/)'
+          )
+
+          if [ "${#prettier_files[@]}" -eq 0 ]; then
+            echo "No Prettier-managed files found."
+            exit 0
+          fi
+
           docker run --rm \
             -v "$PWD:/work" \
             -w /work \
             node:22-alpine \
-            sh -lc 'npx --yes prettier@3 --check --ignore-unknown .'
+            sh -lc 'npx --yes prettier@3 --check --ignore-unknown "$@"' sh "${prettier_files[@]}"
 
   ruff:
     runs-on: [self-hosted, linux, arch, homelab]
@@ -74,5 +85,6 @@ jobs:
           docker run --rm \
             -v "$PWD:/work" \
             -w /work \
+            --entrypoint hadolint \
             hadolint/hadolint:latest-debian \
             -c .hadolint.yaml "${dockerfiles[@]}"