v3.8.0 — JIRA board-driver conductor hardening

PR #3 merged after review: the scope gate finally GLOBS — validate-scope.sh's matcher was a quoted literal test, so glob-authored write_scopes silently matched nothing; the new matcher keeps literal behavior first, refuses bare /* and .. traversal, anchors full-string, and is fixture-backed. Plus: PR-bound tickets stay open until merge, resume state survives supervised restarts, baseline/process failures split from code exhaustion, --no-merge pushes the ticket branch, checkpoint-commit before review rounds, and the jira-tickets library with parity + integration tests. 725 tests green. install.sh unchanged by design: it copies scripts/ and skills/ wholesale and stamps the installed version from package.json.