dotfiles

Michael's own pull request review, answering one question: would he merge this? Runs the change first, because that is what his blocking findings actually come from, then weighs the product bet, the blast radius, naming and interfaces, and craft, with always-on security and test lenses. Calibrated to his measured 7% block rate. Keeps a per-repo memory so environment and convention discovery happens once. Read-only and never posts to GitHub. Use when asked to review a PR or a branch, to check whether a change is safe to merge, or when pointed at a PR number, GitHub URL, or branch name.