feat(ops): add PR queue worker with toolchain pin guard
- pr-queue-worker.py: cron orchestrator (review trigger → AI fix → safety → CI gate → approve/merge) now versioned in-repo - TOOLCHAIN_PINS: close dependabot PRs bumping pinned majors (typescript/eslint/@tsparticles/eslint-config-next/eslint-plugin-react) - STALE_CI_CLOSE_DAYS=2: close dependabot PRs stuck failing CI - Secrets externalized to env (PR_AGENT_*), hydrated from ~/.hermes/.env — file is safe for the public repo; no inline secrets
This commit is contained in: