v0.25.2 — PR watcher rate limits and hono security pins

A patch release that cuts the PR watcher's GitHub API usage and closes new hono advisories.

• PR watcher rate limits: GitHub reads now revalidate with ETags, and GitHub doesn't count unchanged (304) responses against the rate limit. Failed tasks also stop being polled once their PR is merged or closed. Deployments that watch many PRs on one token should stop hitting GitHub's 5,000 requests/hour limit.
• Security: hono is pinned to 4.13.16 and @hono/node-server to 2.1.6 (through the MCP SDK, and in the OpenClaw agent image), covering GHSA-4m76-xfj5-7975, GHSA-h7mg-cq63-vhpq, GHSA-3gg2-335m-rxc6, GHSA-46wx-v44x-9hh2, GHSA-4h7h-rv7c-7m2v, GHSA-qv5m-9pm6-hqp3 and GHSA-jpvv-r467-5p4w.

v0.25.1 was tagged with the PR watcher fix alone and has images, but no release was published for it because CI failed on the hono advisories. Use 0.25.2.

No migrations; upgrading only takes a Helm upgrade:

helm upgrade optio oci://ghcr.io/jonwiggins/optio --version 0.25.2 -n optio --reuse-values

Full changelog: https://github.com/jonwiggins/optio/blob/v0.25.2/CHANGELOG.md