Run every shipped Renode test and pin the executable package checksum alongside the source revision. Exclude Renode-only changes from unrelated build workflows while retaining general lint and review coverage.