test(ci): keep the docs/CI.md check table aligned with workflow jobs - #274

Thank you, @raymondginger2018-sudo. The job-inventory test is useful, and the first test is good as is. Three changes before merge:

1. Match the table, not the whole file. phrase in ci_doc searches the whole document, so lint-and-format passes on "formatting" from the intro (line 7) and from the Desktop row's "Rust formatting"; the table has no lint row today, and the test can't see that. Please read the rows of the "Check | What it verifies" table and match against the first column only.
2. Add a lint row to the table (pre-commit, run on every push and PR by linting.yaml), so lint-and-format maps to a row of its own.
3. Fix the comment. It says jobs that never gate a pull request stay out of the table, but dependency-audit and bundle run only on schedule or manual dispatch and are in CHECK_TABLE. Something like "release-only jobs stay out of the table" would match the code.

Note that #273 is now on main, so please rebase first.

@Zongwei9888 — all three changes are pushed as 5efea265:

1. Table-only matching. test_ci_documentation.py now parses the Check | What it verifies table and matches CHECK_TABLE phrases against the first column only (_check_table_first_columns()), so the intro's "formatting" and the Desktop row's "Rust formatting" no longer count.
2. Lint row added. docs/CI.md now has | Formatting and lint (lint-and-format) | pre-commit, run on every push and PR by linting.yaml |, so lint-and-format maps to a row of its own.
3. Comment reworded. The allowlist comment now reads "Release-only jobs stay out of the check table.", matching dependency-audit/bundle living in CHECK_TABLE.

On the rebase: the branch is already based on the current main tip (8332d745, which includes the #273 merge) — the two commits were rebuilt on top of it when the review fixes were written, so no additional rebase was needed.

Local preflight of this exact head (Windows, Python 3.12/3.13/3.14): no new failures; the only red is the already-tracked Windows-only lifecycle flake.

Thank you, @raymondginger2018-sudo! Merged in 3bb8c88. The table-only matching works: I checked that the intro's "formatting" no longer satisfies lint-and-format, and the test passes against the current workflows.

One follow-up in 49805ef: the new row now names what the check verifies (Ruff lint and formatting, workflow lint, whitespace and file endings) and drops the job id, so it reads like the other rows. The "formatting" phrase still matches its first column.