docs(pm,agents,settings): write-identity locks 1–4 — deny MCP content writes, REST-only dev writes with api_writes, batch default 2, user-account roles
#474
closing-target-claim-guard.yml
on: pull_request
The card this PR closes must claim this branch
20s