Promote Develop to Main

[ptr727]

Promote develop to main. Merge commit, per the main ruleset, and develop is not deleted.

What develop carries beyond main (17 commits, no conflicts on a test merge):

• Resync the Carried Instruction Set and Config With the Hub #922 Resync the carried instruction set and config with the hub: the AGENTS.md router split with a new GOVERNANCE.md, OPERATIONS.md, host-tools.json, CODESTYLE.md on the Skill-pointer shape, verbatim config re-vendors, repo-config/configure.sh retired.
• Align the README Structure and Links With the Fleet Spec #923 Align the README structure and links with the fleet spec.
• Re-vendor the carried hub files to the current canonical #905 Re-vendor the carried hub files to the current canonical.
• The Dependabot nuget-deps and actions-deps bumps that landed on develop (Bump docker/login-action from 4.5.0 to 4.5.1 in the actions-deps group #893 to Bump the nuget-deps group with 1 update #920), which main has absorbed through its own parallel bot PRs.

No functional change to the application, so version.json keeps its 3.22 floor. A human merge never publishes, so the release ships on the next weekly publisher run or a manual dispatch from main.

[Copilot]

Pull request overview

Promotes develop to main, bringing main up to date with the fleet resync work (governance/doc structure, repo configuration baseline, and workflow contract clarifications) plus the dependency bumps that already exist on develop. This is primarily a governance + CI/configuration alignment change with no intended functional changes to the PlexCleaner application.

Changes:

• Introduces the governance “router split” by adding GOVERNANCE.md and updating cross-references across docs and Copilot instructions.
• Adds operational/runbook documentation (OPERATIONS.md) and host tool declaration (host-tools.json), and updates repo self-audit/config docs to reflect hub-hosted tooling (including deleting the carried repo-config/configure.sh).
• Updates workflows and dependency pins/versions (NuGet packages and GitHub Actions), plus doc/config linting settings (markdownlint, cspell, Codecov).

Reviewed changes

Copilot reviewed 23 out of 26 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
WORKFLOW.md	Updates workflow contract text (including new D4.9 guarantee) and repoints governance references to GOVERNANCE.md / hub-hosted tooling.
version.json	Re-indents only; keeps version floor at 3.22 and publicReleaseRefSpec targeting main.
spec/secrets.json	Clarifies secret-store expectations (notably adding Dependabot store for CODECOV_TOKEN).
repo-config/settings.json	Formatting-only reindent of repo settings payload.
repo-config/README.md	Rewrites guidance to reflect hub-hosted configure.sh (not carried) and unmanaged bypass_actors.
repo-config/main.json	Removes managed bypass_actors from payload (now deliberately unmanaged).
repo-config/develop.json	Removes managed bypass_actors from payload (now deliberately unmanaged).
repo-config/configure.sh	Deletes carried script to enforce hub-hosted tooling model.
README.md	Aligns README structure, links, and third-party-tools section to fleet spec.
OPERATIONS.md	Adds local verification + runbooks documentation for publish/test/regression workflows.
host-tools.json	Declares required host tooling (dotnet SDK >= 10.0) for this repo.
GOVERNANCE.md	Adds fleet governance rule text as a new canonical cross-cutting authority (router target for AGENTS.md).
Directory.Packages.props	Updates NuGet package versions (e.g., CliWrap, SourceLink, LanguageTags, System.CommandLine).
cspell.json	Adds mermaid fenced-block ignore pattern and expands project vocabulary word list.
CODESTYLE.md	Reshapes into fleet-wide codestyle doc with skill pointers + PlexCleaner-specific conventions appended.
codecov.yml	Clarifies advisory-only coverage status configuration and disables PR comments.
AUDIT.md	Updates self-audit documentation/commands for unmanaged bypass_actors and dual-store secret expectations.
ARCHITECTURE.md	Repoints governance references to include GOVERNANCE.md and clarifies workflow/governance ownership.
.markdownlint-cli2.jsonc	Allows <details>/<summary> under MD033 and clarifies lint rationale in comments.
.github/workflows/validate-task.yml	Updates markdownlint-cli2-action pin.
.github/workflows/build-release-task.yml	Comment clarifications and robustness tweak for artifact deletion warning handling; confirms build/publish gating semantics.
.github/workflows/build-docker-task.yml	Updates docker/login-action pin.
.github/copilot-instructions.md	Updates Copilot runbook to the new governance split and expands the operational review-loop guidance.
.gitattributes	Expands and clarifies EOL pinning (husky hook, uv.lock, Dockerfiles).
.editorconfig	Clarifies CRLF/LF policy and adds explicit pins for .husky/pre-commit and uv.lock; refines comments.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.