docs: update handoff — Batch 5 complete

[simonsangla]

Updates AGENT_HANDOFF.md with Batch 5 instruction updates summary and flags Dependabot PRs #1-#5 as blocking before Batch 3 product work.

[gemini-code-assist]

Code Review

This pull request updates AGENT_HANDOFF.md to document the Batch 5 instruction updates, which include new rules for Dependabot preflight checks and an expanded merge review process. The feedback suggests improving the readability of the documentation by using backticks for CLI commands and file paths, and adding placeholders to the gh pr commands for better clarity.

[gemini-code-assist]

The CLI commands and file paths in this summary should be wrapped in backticks for better readability and consistency with the AGENTS.md file and the 'Files changed' section below. Additionally, including the <number> placeholder for the gh pr commands (as seen in the source instructions) ensures clarity on their usage.

Suggested change

	1. **Dependabot preflight** — before any batch, run `gh pr list --author app/dependabot --state open` and resolve/disposition any that affect the current work.
	2. **Widened merge review rule** — from "PR comments + bot/agent feedback" to "PR comments, formal reviews, bot/agent code review feedback, AND relevant automated review findings (CodeQL, Copilot, Dependabot, Snyk annotations)". Sources: `gh pr view --comments`, `gh pr view --json reviews`, `gh pr checks`.
	3. **Storage note (skill only)** — canonical is `~/.claude/skills/repo-bootstrap/SKILL.md` (local shared skills dir for this machine); versioned shared skills repo flagged as future migration candidate for portability and change history.
	1. **Dependabot preflight** — before any batch, run `gh pr list --author app/dependabot --state open` and resolve/disposition any that affect the current work.
	2. **Widened merge review rule** — from "PR comments + bot/agent feedback" to "PR comments, formal reviews, bot/agent code review feedback, AND relevant automated review findings (CodeQL, Copilot, Dependabot, Snyk annotations)". Sources: `gh pr view <number> --comments`, `gh pr view <number> --json reviews`, `gh pr checks <number>`.
	3. **Storage note (skill only)** — canonical is `~/.claude/skills/repo-bootstrap/SKILL.md` (local shared skills dir for this machine); versioned shared skills repo flagged as future migration candidate for portability and change history.