feat(repos): enroll the four unmanaged repos that receive Renovate PRs

[JacobPEvans-personal]

What this changes

1. Enroll four repos in config/repos.yml

cc-edge-pack-template, mlx-benchmarks, nix-openwhispr,
raycast-smart-issue. All four receive Renovate PRs and were absent from the
inventory, so module.repo_settings never reached them. Their live settings
differ from the module baseline:

Repo	Difference from the module baseline
raycast-smart-issue	allow_merge_commit: false
nix-openwhispr	allow_auto_merge: false, delete_branch_on_merge: false
cc-edge-pack-template	none (no description set)
mlx-benchmarks	none

Enrolling them brings all four under the baseline in
modules/repo-settings/main.tf, which already sets allow_merge_commit,
allow_squash_merge and allow_rebase_merge to true, along with
allow_auto_merge and delete_branch_on_merge. Those values stay defined in
that one place; no per-repo merge-method keys are added to config/repos.yml.

visibility, description and topics mirror the live values, so the apply
changes settings only. cc-edge-pack-template had no description; the one added
comes from its README. None of the four has a develop default branch, so
gitflow is omitted and defaults to false.

All four already exist, so local.adopted_repos picks them up from the live org
listing and the existing import blocks adopt them — no new import block is
needed.

2. Run the Terraform job when config/ changes

config/*.yml is not inert data: locals.tf reads it with
yamldecode(file(...)) and it drives for_each on the repo, ruleset and
merge-gate modules. The terraform path filter in ci-gate.yml did not match
it, so change 1 above skipped the Terraform job and this PR reported green
having validated nothing. A malformed entry would have merged and surfaced
later on an unrelated .tf PR — the same trap the ci-gate.yml pattern
immediately below it was added to close.

Scope

var.manage_all_repos is untouched and remains false. Its own documentation
says to enable it with -var manage_all_repos=true and never as a side effect
of another change. This raises the managed set from 22 repos to 26; roughly 33
org repos remain unmanaged, tracked separately.

Verification

• config/repos.yml parses; the entries land inside the repos: map and
  conventions_exempt is unchanged (26 repos, up from 22).
• Live values for all four were read with gh api repos/dryvist/<repo> and
  copied verbatim.
• tofu fmt/init/validate and tflint now actually run on this PR — that
  is the point of change 2, and it is the check that covers change 1.
• The plan is the remaining check: expect settings changes on
  raycast-smart-issue and nix-openwhispr, a description set on
  cc-edge-pack-template, adoption of the four repos and their Dependabot
  sub-resources, and no destroys or blanked descriptions/topics.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_0eda250c-4409-4bad-8e79-d1bc55ec241d)

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_55cf69bc-66da-41a8-b932-cd4d06c7f9c6)