v0.19.0 — per-repo `only` targeting for managed-config

• Per-repo only targeting for [[policy.managed-config]]: an optional only = ["owner/repo", …] allow-list restricts a fleet-owned config to just the members that actually use it, instead of syncing byte-identically to every in-scope member. Empty only (the default) keeps today's apply-to-every-in-scope-member behavior; a non-empty list scopes both the sync and the drift notes to the listed repos, emitting a skipped (not in only list) row for the rest. Values must match [[member]].repo exactly, and unknown repos are tolerated — a listed repo that isn't a member simply never matches. Lets a config like biome, used by only a subset of the fleet, target precisely. (#68)

Usage: uses: zmaril/housekeeping@v0.19.0