`.github/workflows/dashboard.yml`

builds the dashboard on every push to main; publishes it only when the repository is public or the build is locked with a password, because Pages on a private repository is served publicly

Reference

Status. Optional - part of the core profile.
How it arrives. merge - combine the standard's content with what the repo already has, keeping both (ignore files, CI that already has jobs)
Shipped form. read it in the standard's own tree

The rule that requires it

The repo backlog holds intents, each with a definition of done; an item

See it in the spec