GitHub delivery watchdog

This is a deterministic scheduled host command. It creates no agent or conversation and needs no agent profile. Configure a repository-scoped fine-grained PAT with Contents and Issues read/write plus Pull requests, Actions, Commit statuses, and Metadata read. Contents write permits merge; Issues write retains the review label when the branch is updated. Never put the token value in the automation definition.

Package scripts/worker.py as worker.py and the shared scripts/github_client.py as github_client.py. The catalog bundle declares these exact files. Its config.json supplies repos, branch_prefix, and the saved secret name. The shared GitHub client resolves only that named secret. Automation owns scheduling and cancellation.