docs(pm,agents,settings): write-identity locks 1–4 — deny MCP content writes, REST-only dev writes with api_writes, batch default 2, user-account roles
#8598
partof-closing-keyword-guard.yml
on: pull_request
Part-of PR must not also close its card
15s