chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• check_deliberate_break.py: Opt-in Gate helper that proves named deliberate-break acceptance tests fail against the base implementation
• registry.yml: Agent registry - source of truth for agent keys and runner workflow mapping
• pr_verifier.py: PR verifier - validates PR changes against acceptance criteria
• WORKFLOW_USER_GUIDE.md: Workflow user guide - explains the CI/agent system for repo consumers

Files Skipped

• .github/workflows/pr-00-gate.yml: Maintains a fully custom Gate workflow; never overwrite (replaces the hard-coded custom_gate_repos list in maint-68).
• ci.yml: File exists and sync_mode is create_only
• renovate.json: File exists and sync_mode is create_only
• cross-repo-smoke.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: cbd86733a4ff0142bd66364176ee99b17a7ed122
Template hash: 402088f18625
Consumer-sync plan ID: sha256:402088f18625fa53fae99052f7025f1d30100df55f0b89df1122c48e96d246c8
Sync phase: canary
Sync branch: sync/workflows-402088f18625
Consumer repo: stranske/Manager-Database
Manifest: .github/sync-manifest.yml

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Review skipped — only excluded labels are configured. (7)

• sync
• workflow:source-sync
• workflow:source-maintenance
• consumer-sync
• integration-sync
• workflows-sync
• template-sync

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: e46fab09-2803-47f1-abc7-3f46da00cac1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

🟡 Not ready to approve

scripts/check_deliberate_break.py can still crash during the tamper-check path on git CalledProcessError, preventing a structured JSON verdict from being emitted.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

This review doesn't count toward merge requirements. Sign up for the private preview to control whether Copilot approvals count.

Pull request overview

Syncs consumer workflow template content from stranske/Workflows, updating the agent registry, verifier robustness, and consumer-facing documentation to reflect the newer central-workflow model.

Changes:

• Harden pr_verifier.py structured-output parsing to handle non-string provider payloads (e.g., block lists) and make schema-repair responses stricter.
• Extend check_deliberate_break.py to optionally install minimal pytest runtime deps (PyYAML) and improve failure reporting for timeouts / install failures.
• Update WORKFLOW_USER_GUIDE.md to clarify which maintenance workflows are central-only, and bump the default Codex model selection in .github/agents/registry.yml.

File summaries

File	Description
WORKFLOW_USER_GUIDE.md	Updates workflow documentation to distinguish central-only maintenance workflows from consumer templates.
scripts/langchain/pr_verifier.py	Makes LLM response parsing resilient to provider “content” shapes and avoids wasting repair attempts on metadata-only replies.
scripts/check_deliberate_break.py	Adds runtime dependency installation (PyYAML) and additional error-to-JSON handling for deliberate-break Gate checks.
.github/agents/registry.yml	Updates the default Codex execution profile model/fallback to the latest synced registry values.

Review details

• Files reviewed: 4/4 changed files
• Comments generated: 1
• Review effort level: Lite

We're testing this review assessment. Please use 👍 or 👎 to tell us if it's correct.

[stranske]

Superseded by the newer sync generation in #1516. The actionable tamper-check review finding is being repaired at the Workflows source in stranske/Workflows#2908; the post-merge sync will replace #1516 as needed.