fix: hold the probes to the repository checks

The new probes now refuse abbreviated options, read the GitHub token through github_headers, type every signature and document every option. The site build watches region_check.py and the content list, and validate.yml's tests/** counts as watching the list. The testing guide names the two new test modules.

tests/test_workflow_paths.py

@@ -154,7 +154,11 @@ class ThePullRequestBuildsTheSite(unittest.TestCase):
             if not path.startswith(("scripts/", ".github/"))
         }
         self.assertIn("wiki/**", inputs)
-        self.assertEqual(sorted(inputs - watched), [])
+        # A path the deploy names inside a folder validate.yml watches
+        # whole (tests/campaign/content.yml under tests/**) is watched.
+        unwatched = [path for path in inputs - watched
+                     if not any(fnmatch.fnmatch(path, pattern) for pattern in watched)]
+        self.assertEqual(sorted(unwatched), [])
         self.assertIn("scripts/**", watched)