ci: make file-size policy a first-class gate (#6187)