Add me readiness skill

[pirog]

Summary

• Adds $piro-me-readiness as a repo-local Codex workflow for verifying that this me checkout and macOS user profile are ready for Codex work as pirog.
• Adds read-only local machine checks for Homebrew, Brewfile packages, dotfiles, manual app readiness, Tailscale, 1Password vault access, 1Password Environment access, and repo-owned Codex plugin links.
• Keeps GitHub and monday identity checks as runtime connector probes instead of local helper checks.
• Documents the maintenance policy, protected-resource fallback rules, manual setup checklist, readiness reporting format, and the repo-managed Codex guidance to avoid generated PR title prefixes.

Blocked

This PR is currently blocked by tanaabased/bootbox#4: tanaabased/bootbox#4

The failing Example Tests / options and Example Tests / envvars checks are caused by Bootbox installing stable 1password-cli as a core dependency before this repo's Brewfile applies cask "1password-cli@beta". Homebrew rejects that because the stable and beta casks conflict. Bootbox needs to switch its core op provider to 1password-cli@beta first, or otherwise stop installing the conflicting stable cask before the downstream Brewfile runs.

Commit Breakdown

1. 69c416a Document manual setup checklist
   • Adds human setup steps after bootstrap.
2. c4acf21 Add me readiness skill
   • Introduces the workflow skill, icon assets, helper entrypoint, and baseline tests.
3. a16196e Add app readiness checks to me skill
   • Adds Homebrew-first app/package readiness, 1Password vault access, and Tailscale readiness.
4. ca3582d Add 1Password environment readiness checks
   • Adds the protected-resource fallback through op run --environment and sentinel validation.
5. 553847e Refine me readiness scope and buckets
   • Locks helper buckets and keeps connector checks in the skill runtime.
6. 6056ad8 Document me readiness maintenance policy
   • Moves durable maintenance rules into AGENTS.md and trims README scope.
7. 49204b3 Finalize me readiness checks
   • Switches to the beta 1Password CLI cask, clarifies unsandboxed helper behavior, adds consistent reporting guidance, and splits the helper into a CLI wrapper plus tested skill-local library.
8. cf13d20 Avoid generated PR title prefixes
   • Extends managed Codex git guidance so generated-tool prefixes are avoided for pull request titles as well as commit messages.

Validation

• bun run test - 43 passing
• git diff --check
• bun run lint
• bun run codex:validate - passed with existing warning: starter prompt references planned future skill piro-writing
• bun run codex:check
• $piro-me-readiness was run after the helper refactor and passed on rerun

Notes

• This PR does not run Leia, bun run build, brew install, or brew bundle locally.
• The branch was pushed over SSH and the PR was opened/updated through the GitHub connector.

[netlify]

✅ Deploy Preview for pirog-boot-me ready!

Name	Link
🔨 Latest commit	cf13d20
🔍 Latest deploy log	https://app.netlify.com/projects/pirog-boot-me/deploys/69f51334b0c4b500085574c0
😎 Deploy Preview	https://deploy-preview-19--pirog-boot-me.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.