The required status checks build_mem0 (3.10/3.11) and build_embedchain
live in ci.yml, which was path-filtered to mem0/tests/embedchain only.
PRs that touch only cli/** or docs/** could never satisfy branch
protection because the workflow never triggered.
Adds cli/**, docs/**, and .github/workflows/** to the pull_request
paths so required checks actually run on CLI and docs PRs.