Merge branch 'main' into data-driven

.github/workflows/website.yaml

@@ -107,19 +107,10 @@ jobs:
         uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha || inputs.branch || 'production' }}
-          submodules: false
+          # the only submodule is closed, which needs secrets
+          submodules: ${{ env.HAS_ROOT_REPO_CONTEXT == 'true' && 'recursive' || 'false' }}
           token: ${{ secrets.GH_TOKEN || github.token }}
 
-      # Future proofing for Reforged: we'll have both closed and open repos, so
-      # we need to handle them here instead of disabling submodules outright
-      - name: Checkout submodules
-        run: |
-          if [ "$HAS_ROOT_REPO_CONTEXT" = "true" ]; then
-            git submodule update --init --recursive --depth=1
-          else
-            git submodule update --init --recursive --depth=1 -- . ':!packages/closed'
-          fi
-
       - name: Setup bun
         uses: oven-sh/setup-bun@v2