[richard-ramos]

Regenerate boringssl.nim during the required lint check and fail if it differs from the committed file. This catches source/generated-file mismatches before merging and tells contributors to run ./build.sh and commit the result.

Generation previously embedded absolute checkout paths in source comments. Normalize those comments to repository-relative paths so identical sources produce identical output in different checkouts. The large boringssl.nim diff removes those path prefixes and reformats the shorter comments; declarations are unchanged.

Use the same Ubuntu 22.04 runner and generator dependency setup as the BoringSSL update workflow. The check runs for all PRs and merge groups; no branch-rule changes are needed because lint is already required.