feat(ops): add PR queue worker with toolchain pin guard

- pr-queue-worker.py: cron orchestrator (review trigger → AI fix → safety →
  CI gate → approve/merge) now versioned in-repo
- TOOLCHAIN_PINS: close dependabot PRs bumping pinned majors
  (typescript/eslint/@tsparticles/eslint-config-next/eslint-plugin-react)
- STALE_CI_CLOSE_DAYS=2: close dependabot PRs stuck failing CI
- Secrets externalized to env (PR_AGENT_*), hydrated from ~/.hermes/.env —
  file is safe for the public repo; no inline secrets
This commit is contained in:
asepharyana
2026-09-21 11:36:14 +07:00
parent d516a0b563
commit 835552c5ca
2 changed files with 1238 additions and 0 deletions
File diff suppressed because it is too large Load Diff