work-on-issues

SUSPICIOUS: The core GitHub/GitLab automation is coherent with the stated purpose, and official `gh`/`glab` usage is consistent. Risk comes from disproportionate secret handling (`.env` copying into sub-agent worktrees), autonomous merge/close actions, and reliance on an unverified helper (`find-mismatch`) whose trust boundary is unclear.