GRM-62: fix: include lint extras in setup-ci and setup-release

.taskid

@@ -1 +1 @@
-GRM-61
+GRM-62

Makefile

@@ -12,10 +12,11 @@ setup: $(VENV)/bin/activate .env activate-scripts checkmake install-tools
 	@export PATH="$(HOME)/.local/bin:$$PATH"; \
 	$(PYTHON) scripts/setup.py --bin "$(BIN)"
 
-# Lean setup for CI jobs that only need pytest + runtime deps
+# Lean setup for CI jobs that need pytest + lint tools + runtime deps
 # (detect-changes, discover-runners, pr-review, sync-wiki, badges)
+# badges job runs generate_badges.py which needs ruff, pyright, bandit
 setup-ci: $(VENV)/bin/activate .env
-	@$(PYTHON) scripts/setup.py --bin "$(BIN)" --extras ci --no-ansible-collections --no-pre-commit --no-tea-login
+	@$(PYTHON) scripts/setup.py --bin "$(BIN)" --extras "ci,lint" --no-ansible-collections --no-pre-commit --no-tea-login
 
 # Setup for the quality job (lint + test deps, actionlint tool)
 setup-quality: $(VENV)/bin/activate .env install-tools
@@ -27,11 +28,11 @@ setup-molecule: $(VENV)/bin/activate .env install-tools
 	@export PATH="$(HOME)/.local/bin:$$PATH"; \
 	$(PYTHON) scripts/setup.py --bin "$(BIN)" --extras "ci,molecule" --no-pre-commit --no-tea-login
 
-# Setup for release jobs (needs git-cliff and tea tools)
+# Setup for release jobs (needs git-cliff, tea, and lint tools for release.py)
 setup-release: $(VENV)/bin/activate .env
 	@$(PYTHON) scripts/install_tools.py --tool git-cliff --tool tea
 	@export PATH="$(HOME)/.local/bin:$$PATH"; \
-	$(PYTHON) scripts/setup.py --bin "$(BIN)" --extras ci --no-ansible-collections --no-pre-commit
+	$(PYTHON) scripts/setup.py --bin "$(BIN)" --extras "ci,lint" --no-ansible-collections --no-pre-commit
 
 .env:
 	@if [ ! -f .env ]; then \