claims-reverify: actually upload the report artifact (#20893)

The nightly re-verify report is written to a dot-prefixed file
(.claims-reverify-report.json), and actions/upload-artifact v4.4+
excludes hidden files by default. The "Upload re-verify report" step has
therefore been a silent no-op on every run — the step's hashFiles()
guard matches dotfiles, so the step ran, found the file, and uploaded
nothing but a warning annotation. The report's only surviving copy is
the stdout dump in the run log, which masks the org name and ages out.

Opt the dotfile back in with include-hidden-files: true (the same
setting every other dot-path upload in this repo already carries), and
turn the silent-skip class into a hard failure with
if-no-files-found: error. The hashFiles guard still covers the
legitimately-absent case (job died before the report was written), so
the error can only fire when the file exists but the uploader refuses
it — which is precisely the regression this fixes.

Observed on run 31780468227 (2026-08-14):
"No files were found with the provided path: .claims-reverify-report.json.
No artifacts will be uploaded."


Claude-Session: https://claude.ai/code/session_01Hp4LqiP4u81uT48MS8Hea4

Co-authored-by: Claude <noreply@anthropic.com>

Author: CamSoper

.github/workflows/claims-reverify.yml

@@ -198,6 +198,15 @@ jobs:
         with:
           name: claims-reverify-report
           path: .claims-reverify-report.json
+          # Dotfile: upload-artifact excludes hidden files unless told
+          # otherwise, and hashFiles() has no such exclusion — so without this
+          # the step runs and uploads nothing, with only a warning annotation.
+          # That's exactly what happened on every run before 2026-08. The
+          # hashFiles guard above covers the legitimately-absent report (job
+          # died before the write), so a no-files result here can only be a
+          # regression of the hidden-file kind: fail loudly.
+          include-hidden-files: true
+          if-no-files-found: error
           retention-days: 90
 
       # Counts only + a run link — the evidence lives in the report artifact