chore(release): promote develop to main

.github/workflows/ci-gate.yml

@@ -52,7 +52,7 @@ jobs:
       terraform: ${{ steps.filter.outputs.terraform }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
-      - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4
+      - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4
         id: filter
         with:
           filters: |
@@ -62,6 +62,14 @@ jobs:
               - '.terraform.lock.hcl'
               - '.tflint.hcl'
               - 'tests/**'
+              # config/*.yml is not inert data: locals.tf reads it with
+              # yamldecode(file(...)) and it drives for_each on the repo,
+              # ruleset and merge-gate modules. Without this pattern a change
+              # to the inventory skips the Terraform job entirely, so a
+              # malformed entry merges green and fails later on someone
+              # else's .tf PR -- the same trap the ci-gate.yml pattern below
+              # was added to close.
+              - 'config/**'
               # This workflow defines the Terraform job (tool versions, tflint
               # invocation), so a change here must re-run it -- otherwise a
               # broken tool pin merges green as SKIPPED and only fails later,

config/repos.yml

@@ -378,6 +378,44 @@ repos:
     description: "Private: deep docs + a simplified, original SAM/Falcon-on-Lambda portal and LLM-assistant reference implementation"
     topics: []
 
+  # Enrolled 2026-08-22. All four receive Renovate PRs but were unmanaged, so
+  # nothing held them to the module's repo-settings baseline and they had
+  # drifted away from it: raycast-smart-issue had merge commits disabled, and
+  # nix-openwhispr had both auto-merge and delete-branch-on-merge disabled.
+  # Descriptions, topics and visibility below mirror the live values, so
+  # enrolling changes settings and nothing else. cc-edge-pack-template had no
+  # description at all; the one below is drawn from its README.
+  cc-edge-pack-template:
+    visibility: public
+    description: "Template repo for dryvist Cribl packs - reusable test/release workflows and scaffolding"
+    topics: []
+
+  mlx-benchmarks:
+    visibility: public
+    description: "Benchmark harness for MLX and local LLMs on Apple Silicon (results: hf.co/datasets/JacobPEvans/mlx-benchmarks)"
+    topics: []
+
+  nix-openwhispr:
+    visibility: public
+    description: "Reproducible Nix packaging and macOS lifecycle integration for OpenWhispr"
+    topics: []
+
+  raycast-smart-issue:
+    visibility: public
+    description: "Too lazy to write GitHub issues yourself? Let a local AI do it. Raycast extension that turns a half-baked idea into a fully-structured issue using Ollama."
+    topics:
+      - ai-powered
+      - developer-tools
+      - github-issues
+      - llm
+      - local-ai
+      - ollama
+      - productivity
+      - raycast
+      - raycast-extension
+      - typescript
+
+
 # Recorded opt-outs from the org repo-conventions standard, consumed by the
 # `repo-conventions-sweep` workflow in the org `.github` repo. Terraform does
 # NOT read this key (locals.tf decodes only `.repos`) — it lives here so the

gitflow.tf

@@ -55,36 +55,6 @@ import {
   id = "llm-prompt-evals:develop"
 }
 
-# The five repos enrolled alongside this block were each running git-flow by
-# hand before config/repos.yml described them: develop already exists and is
-# already the default branch on all five. Every one therefore adopts rather
-# than creates, and the plan must show imports / no-op updates for them — a
-# create-or-destroy on any of these is a bug, not an expected first apply.
-import {
-  to = github_branch.develop["ansible-proxmox-ai"]
-  id = "ansible-proxmox-ai:develop"
-}
-
-import {
-  to = github_branch.develop["nix-agy"]
-  id = "nix-agy:develop"
-}
-
-import {
-  to = github_branch.develop["nix-codex"]
-  id = "nix-codex:develop"
-}
-
-import {
-  to = github_branch.develop["nix-hermes"]
-  id = "nix-hermes:develop"
-}
-
-import {
-  to = github_branch.develop["x10-lite"]
-  id = "x10-lite:develop"
-}
-
 # Make develop the default branch on git-flow repos: new clones and new PRs
 # target the integration branch, while main is reserved for releases. The
 # reference to github_branch.develop makes this depend on the branch existing