chore(template): audit crons require PM-routing + GH-issue filing; add UIUX schedule

[HongmingWang-Rabbit]

Summary

Audit agents (Security, QA, UIUX) were running their crons successfully but findings stayed trapped in agent memory — they didn't consistently flow into GitHub issues or reach developers with build ability. This PR rewrites the three audit cron prompts so the post-audit delivery is mandatory, structured, and routed through PM.

Motivation

Incident seen 2026-04-13 evening: Security Auditor had 13 open critical findings in its memory including an unauthenticated-plugin-install RCE (plugins_registry/builtins.py:163-184). BE picked up a batch earlier in the day as a one-off escalation, then went idle while findings continued to accumulate silently. UIUX Designer was similarly stuck — screenshots unavailable due to missing container libs (#23), falling back to HTML analysis, but no one saw the output.

Root cause: the cron prompts treated post-audit delegation as optional ("if you find issues, report to Dev Lead") and wrote to memory as the primary deliverable. Memory is invisible unless someone reads it.

Changes

1. Security Auditor — replace 12h schedule (7 6,18 * * *) with hourly (17 * * * *) to match what's actually in the platform DB. Backfill the full hourly prompt into the template (see Runtime-added workspace_schedules drift from org-template — template is not source of truth #24 for the separate template-vs-runtime drift fix).

2. QA Engineer — keep 12h cadence; tighten the post-audit routing.

3. UIUX Designer — add a schedule block (was previously runtime-only; see Runtime-added workspace_schedules drift from org-template — template is not source of truth #24). Uses hourly cadence. Accepts that Playwright may be unavailable (UIUX Designer workspace image missing X11/glib — Playwright screenshots fail in audit cron #23) and falls back to HTML analysis, explicitly noting the limitation in the PM deliverable.

4. Shared routing contract — all three audit crons now end with an identical FINAL STEP — DELIVERABLE ROUTING (MANDATORY every cycle) block:

   • (a) For each CRITICAL/HIGH finding, gh issue create with dedup against open issues. Capture issue numbers.
   • (b) delegate_task to PM with a structured summary (timestamp/SHA, findings by severity, issue numbers, top recommendation). PM owns cross-team routing; audit agents don't DM Dev Lead directly.
   • (c) Even on CLEAN cycles: delegate_task PM a one-line "clean on SHA X" so audits are observable instead of silent.
   • (d) Memory write is a secondary record, not the primary deliverable.

Design rationale

• GitHub issues as the source of truth for audit findings — durable, searchable, reviewable, and already wired into the review-agent feedback loop.
• PM as router — respects the existing org hierarchy; PM already knows who's free and what's in flight. Auditors shouldn't second-guess that.
• Clean cycle still reports — silent clean cycles are indistinguishable from broken audits. One-line ping keeps observability honest.

Related issues

• UIUX Designer workspace image missing X11/glib — Playwright screenshots fail in audit cron #23 — UIUX Designer container missing libglib/X11 for Playwright. This PR accepts the current limitation; UIUX Designer workspace image missing X11/glib — Playwright screenshots fail in audit cron #23 tracks the image fix.
• Runtime-added workspace_schedules drift from org-template — template is not source of truth #24 — platform-layer schedule drift (runtime workspace_schedules vs template). This PR backfills the template for the current audits; Runtime-added workspace_schedules drift from org-template — template is not source of truth #24 tracks preventing future drift.
• 13 open criticals in Security Auditor memory — out of scope for this PR; that's team work once the routing is in place. First hourly cron after this lands should start filing issues.

Test plan

• python -c "import yaml; yaml.safe_load(open('org-templates/molecule-dev/org.yaml'))" — YAML valid.
• After merge + re-import: workspace_schedules table should show Security Auditor on 17 * * * * and UIUX Designer present with 11 * * * *.
• Next Security cron run: delegations to PM visible in GET /workspaces/<PM>/delegations and/or new GH issues filed.
• Next UIUX cron run: same observable routing.

🤖 Generated with Claude Code

[HongmingWang-Rabbit]

7-gate verification passed.

Gate 1 (CI): 6/6 green.
Gate 2 (build): YAML-only (org-templates/molecule-dev/org.yaml) — skipped cleanly.
Gate 3 (tests): YAML-only — skipped cleanly.
Gate 4 (security): No committed secrets, no new env vars. Token-pattern grep scans commits (safe); gh uses agent's own auth.
Gate 5 (design fit): PM-routing via delegate_task aligns with 'delegate through PM, never bypass hierarchy'. GH-issue filing uses 'gh issue create' only — no auto-close, no destructive ops. Dedup-before-create prevents spam. Clean cycles still route to PM for observability.
Gate 6 (line review): Hourly crons (:17 security, :11 UIUX) — busy but not every-minute noisy. gh calls scoped to list/create/diff — no 'gh repo delete', no --force, no auto-close.
Gate 7 (canvas): No canvas files — skipped.

Verdict: merge.