GitHub Pull Requests 0.0.1

Added

• The GitHub Pull Requests plugin, first released from its own repository. It lists the open
  pull requests of up to 10 public GitHub repositories in its Pull requests panel, with
  the commands Pull requests: Refresh, Add repository and Remove repository. It
  talks only to api.github.com and avatars.githubusercontent.com, without a token.
• A new list starts with the project's own repositories, rim-platform/rim-ui and
  rim-platform/rim-server, until you save one of your own.
• The repository holds the built plugin at its root (rim-plugin.json, main.mjs and
  panels/), so the desktop installs it from its git URL; each release attaches a
  .rimbundle for Install from link.

Install

Install from link (Settings → Plugins):

https://github.com/rim-platform/plugin-github-prs/releases/download/v0.0.1/chat.rim.github-prs-0.0.1.rimbundle#sha256=1a1a6cff0051c80cdcec1f09a28f38ff005e503a4b0e6c64b390a6a25d781ced

The app fetches a link from its web view, and GitHub serves release assets without
CORS headers, so this link works on the desktop once it fetches links natively
(rim-ui issue #146); in the browser, install through a workspace registry or from a
host that sends CORS headers.

Install from git URL (Settings → Plugins, on the desktop):
https://github.com/rim-platform/plugin-github-prs.git installs the built plugin on master.

Verify the bundle

1a1a6cff0051c80cdcec1f09a28f38ff005e503a4b0e6c64b390a6a25d781ced  chat.rim.github-prs-0.0.1.rimbundle

The bundle has a build provenance attestation from this repository's release workflow.
Next to the downloaded files:

sha256sum --check SHA256SUMS
gh attestation verify chat.rim.github-prs-0.0.1.rimbundle --repo rim-platform/plugin-github-prs

The maintainer attaches chat.rim.github-prs-0.0.1.rimsig.json, the publisher's signed
statement for this bundle, by hand after the release. A workspace adds it to its plugin
registry with Workspace settings → Plugins → Add from files, together with the bundle.