GRM-53: refactor: enforce script separation and document import rules

docs/tech/ci-cd-workflow.md

@@ -221,6 +221,25 @@ When adding or removing Gitea runners:
 2. If runners are at the instance level, update the `MOLECULE_RUNNERS` repo variable
 3. The workflow automatically scales the matrix to match available runners
 
+### Molecule Test Distribution
+
+`scripts/ci/distribute_molecule.py` discovers all molecule scenarios
+under `ansible/roles/*/molecule/` and crosses them with the supported
+OS platform matrix (defined in `scripts/ci/platforms.py`), then splits
+the resulting test pairs evenly across the requested number of runners.
+Each pair is encoded as `scenario|platform_name|platform_image|platform_command`.
+
+`scripts/ci/molecule_ci_guard.py` runs the actual molecule test for a
+given test pair, with CI context (Gitea URL, token, run ID) for
+reporting results back to the commit status API.
+
+### Commit Message Validation
+
+`scripts/ci/validate_commit_msg.py` validates that commit messages
+follow the conventional commit format (`feat:`, `fix:`, `docs:`, etc.).
+It is used by the pre-commit hook to enforce conventional commits on
+feature branches.
+
 ### Release Commit Detection
 
 The `detect-type` job in the post-merge workflow runs