[Jay Gordon (jaydestro)]

What changes

• Scans and classifies gallery additions, canonical URL updates, and retirements.
• Creates an unassigned issue only when at least one validated recommendation is actionable.
• Includes a reason and supporting criteria or evidence for every issue item.
• Lets a maintainer edit the issue directly, then assign it to Copilot.
• Instructs Copilot to treat the edited issue as the source of truth, update the catalogs, run tests/build, and create a draft PR.
• Removes PAT-based publishing, repository-writing automation, privileged rejection automation, hardcoded reviewer identities, and the unused code-review skill.

Permissions

Audit and classification remain repository-read-only with copilot-requests: write. A trusted default-branch publisher has only actions: read and issues: write. Actions never write repository contents or create branches or pull requests.

Validation

npm run test:gallery-audit (64 passed) and npm run build pass.