fix: SC2038 — use find -print0 | xargs -0 in workflow scripts

[Copilot]

Six find | xargs pipelines in workflow scripts lacked null-delimiter safety, causing silent argument mis-splitting on filenames with spaces or special characters (SC2038/actionlint).

Changes

• repository-quality-improver.md (3 sites): find ... | xargs wc -l → find ... -print0 | xargs -0 wc -l
• spec-extractor.md (1 site): find ... | xargs grep -h → find ... -print0 | xargs -0 grep -h
• unbloat-docs.md (2 sites): -print | xargs grep -rL → -print0 | xargs -0 grep -rL
• Recompiled all three workflows; corresponding .lock.yml files updated

# Before
find . -type f -name "*.go" ! -name "*_test.go" ! -path "./.git/*" | xargs wc -l

# After
find . -type f -name "*.go" ! -name "*_test.go" ! -path "./.git/*" -print0 | xargs -0 wc -l

• Fixes [static-analysis] Report - 2026-08-02 #49714

[Copilot]

Pull request overview

Fixes SC2038 findings from #49714 by making six find | xargs pipelines null-delimiter safe.

Changes:

• Adds -print0 and xargs -0 across three workflows.
• Regenerates the corresponding compiled workflow files.

Show a summary per file

File	Description
.github/workflows/repository-quality-improver.md	Makes Go metric collection filename-safe.
.github/workflows/repository-quality-improver.lock.yml	Updates compiled workflow output.
.github/workflows/spec-extractor.md	Makes import extraction filename-safe.
.github/workflows/spec-extractor.lock.yml	Updates compiled workflow output.
.github/workflows/unbloat-docs.md	Makes documentation filtering filename-safe.
.github/workflows/unbloat-docs.lock.yml	Updates compiled workflow output.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 6/6 changed files
• Comments generated: 0
• Review effort level: Balanced

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.84.3