v3.5.892

Fixed

• Guard approve_collaborator_pr() against non-collaborator approvals — non-collaborator users running aidevops with a repo in their repos.json could submit PR approvals via the pulse merge pass. GitHub accepts these on public repos but they don't count toward branch protection. Now checks write access before approving. (#16767)