v1.2.2

Adds `/pr-preflight:fix`: applies the mechanical, safe findings (leftover debug output, unused imports) directly, and reports everything else (secrets, missing tests, TODOs, convention drift) same as `/pr-preflight:preflight` — those need a human decision, not an automated edit.