dunn.dev/pipeline 4.12.0

The reference-check recipe in the ci image runs reference's justfile (just
guard, just check) instead of its Makefile. A minor: no template input added,
removed or renamed.