v0.1.4 — pai-watch works out-of-box

Fixed

• pai-watch dead on a fresh install — the skill defaulted PAI_PROJET_ROOT to /opt/pai-projet (rarely the real clone root) and PAI_PROPOSALS_DIR to /var/lib/pai-anywhere/proposals (owned by pai-anywhere's pai user, unwritable by the Hermes gateway). The hourly watcher silently no-op'd and dropped every proposal. PAI_PROPOSALS_DIR now defaults to ${XDG_STATE_HOME:-$HOME/.local/state}/pai-hermes/proposals (gateway-writable, created on demand); install.sh auto-detects PAI_PROJET_ROOT, narrows PAI_WATCH_SOURCES to repos that exist, writes all three to $HERMES_HOME/pai-hermes.env, and wires it as an EnvironmentFile= drop-in on the systemd --user gateway. uninstall.sh reverses it.
• uninstall.sh shellcheck SC2015 — rewrote is-active && restart || true as explicit if … then … fi (CI runs plain shellcheck).
• CI: actions/checkout v4 → v7 — Node 20 EOL on GitHub runners.

Full diff: v0.1.3...v0.1.4