Harden autonomous merge and deployment controls

[kai-linux]

Summary

• bind high-risk assessment and approval to the PR head SHA and enforce the approval before merge
• fail closed when the independent work verifier errors
• reject arbitrary source conflict union merges
• keep Telegram credentials out of process arguments
• replace mutable auto-pull/push with approved SHA-pinned deployments
• add redacted staged/CI secret scanning

Validation

• pytest -q (741 passed)
• git diff --check
• bash -n bin/run_autopull.sh hooks/pre-commit
• Python compilation and secret scan

Operational containment

All Acemagic agent-os projects were switched to dispatcher_only pending process isolation.

[kai-linux]

Self-review complete. Verified the pushed diff for fail-closed behavior, SHA binding, approval expiry/hold semantics, credential redaction, immutable deployment ancestry checks, and conflict handling. Follow-up review fixes removed the remaining queue Telegram argv exposure and made push-event scanning robust. Both push and pull_request CI runs pass.