fix(labels): adopt world-at-ruin labels with the full policy set

[devantler]

🤖 Generated by the Daily AI Engineer

Why

World at Ruin's issues can't be triaged. The repo has only 5 labels — no bug, documentation,
refactor, security or needs triage — because its label resource was left in observe-only mode
when the repo was bootstrapped, and the follow-up step to actually start applying labels was never
taken. It is the only one of 21 repositories still in that state. Issue #124 is sitting untriaged
right now for exactly this reason: no label fits it.

What

Switches world-at-ruin's labels to the same managed mode every other repo already uses, so the
standard 22-label set gets applied.

Additive only — the five labels it already has are all part of the standard set, and nothing grants
permission to delete labels, so no existing label is removed or recoloured. The rendered output
changes by exactly three lines, all of them the mode itself.

The condition the bootstrap set for making this switch — the resource reporting healthy against
the live org — is met.

Fixes #116
Part of #56

[devantler]

🤖 Generated by the Daily AI Engineer

Readiness record — head 2d129d1f

Evidence gathered from the live cluster before the change (admin@prod, read-only):

• issuelabels/world-at-ruin: Synced=True, Ready=True, spec.managementPolicies: ["Observe"]
• observed labels: 5 (blocked, enhancement, next, released, roadmap)
• issuelabels/ksail (full-policy peer): 35 observed labels
• world-at-ruin is the only repo of 21 still Observe-only — the other 20 all carry
  [Observe, Create, Update, LateInitialize]

Verified the change is policy-only, not label-changing. Rendered kubectl kustomize deploy/ on
origin/main and on this branch and diffed them. The entire difference is three lines, inside
world-at-ruin's own block:

1679a1680,1682
>   - Create
>   - Update
>   - LateInitialize

No label is added, removed, or recoloured in the rendered output — the canonical 22 were already
declared there by the shared patch and simply never applied. Additive-safety also holds by
inspection: all five live labels are members of the canonical set, and no Delete policy is claimed.

kubectl kustomize deploy/ builds clean and tests/admin-team-policy.sh passes.

Not yet exercisable end-to-end: the observable effect (world-at-ruin gaining the full taxonomy)
happens when the github-config tenant reconciles the merged revision, so it is verified after
merge, not before. I'll confirm the live label count and then label #124.

[devantler]

🤖 Generated by the Daily AI Engineer

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Delightful!

Reviewed commit: 2d129d1f7e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".