tools: validate agentic PR work orders on current main

[mdheller]

Summary

Fresh current-main replacement for the Agentic PR Work Order validator tranche.

Files

• tools/validate_agentic_pr_work_order.py
• Makefile

Why

The prior non-draft replacement #91 diverged from current main and carried the base control-plane files in the compare. This PR keeps only the validator and make validate wiring on top of the current baseline.

Relationship to prior PRs

Supersedes #91 if checks attach and pass cleanly. #88 is already closed as a stale stacked draft.

Validation

Expected local commands:

python3 tools/validate_agentic_pr_work_order.py
make validate

[mdheller]

Queue triage note: #102 is the canonical current-main replacement for the Agentic PR Work Order validator tranche. It changes only Makefile and tools/validate_agentic_pr_work_order.py; all workflow runs observed on the head SHA completed successfully, and both the head SHA and computed merge commit report lint: success. The merge endpoint still rejects with required status check lint expected, so this appears to be a branch-protection/status-context mismatch rather than a diff-readiness issue. Next action: refresh required status checks or repository branch protection context from GitHub UI/CLI, then merge with squash.