fix: CI failures in combined dependabot PR

This commit fixes multiple CI failures that occurred after merging the dependabot PRs:

1. **Lint job failure**: The workflow was trying to run 'just setup-gha' before 
   installing the 'just' command itself. Fixed by adding the necessary setup steps
   (just, uv, mise) before the setup-gha step, matching the pattern used in main.yml.

2. **SASS build failure - @primer/css v22 breaking change**: The updated @primer/css 
   package (v21→v22) removed @primer/view-components as a direct dependency, but 
   navigation/tabnav.scss still imports from it. This caused a 'Can't find stylesheet' 
   error. Fixed by:
   - Keeping @primer/css at ~21 (latest v21.x)
   - Adding @primer/view-components as an explicit dependency
   - Configuring SASS to silence deprecation warnings from @primer/css's use of 
     deprecated @import syntax (which we cannot control)

3. **Code formatting**: tasks.py needed reformatting with ruff.

4. **Terraform lint failure**: The lint-terraform recipe needs to run 'tofu init' 
   before 'tofu validate' to download modules. Added 'tofu init -backend=false' 
   before validation.

Changes:
- .github/workflows/pr.yml: Add just/uv/mise installation steps before setup-gha
- package.json: Keep @primer/css at ~21, add @primer/view-components dependency
- pelicanconf.py: Add SASS_EXTRA_ARGS to silence import/global-builtin deprecations
- tasks.py: Reformatted with ruff
- justfile: Add 'tofu init -backend=false' before validation in lint-terraform

The build now succeeds both locally and should pass in CI.

Author: offbyone

.github/workflows/pr.yml

@@ -14,12 +14,19 @@ jobs:
   lint:
     name: Lint
     runs-on: ubuntu-latest
+    permissions:
+      contents: read # only needed for private repos
     steps:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
 
+      - name: Install just
+        uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3
+      - name: Install uv
+        uses: astral-sh/setup-uv@7edac99f961f18b581bbd960d59d049f04c0002f # v6.4.1
+      - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
       - name: Set up dependencies
         run: just setup-gha
 

justfile

@@ -124,6 +124,8 @@ lint-terraform:
     exit 0
   fi
   tofu fmt -check -recursive .
+  # Initialize terraform before validation
+  tofu init -backend=false
   tofu validate
 
 lint-rst: