[Hy4ri]

Summary

• Explicitly dispatch Build Check after a successful updater bot push.
• Grant the update job actions: write and pass its existing token to gh.
• Preserve the pre-push build verification and existing CI targets.

Verification

• YAML parsing and bash syntax checks passed.
• Mocked commands verified successful dispatch, no dispatch after failed push, and failure propagation.
• git diff --check passed.

Bot pushes made with GITHUB_TOKEN do not trigger push workflows. workflow_dispatch is an explicit supported exception. No new secret is required.