Summary

Implements automated enforcement of standard GitHub repository settings across all worlddriven organization repositories to ensure consistency and support the democratic merge workflow.

Changes

Standard Configuration Constants

• STANDARD_REPO_SETTINGS: Enforces squash-only merge, branch cleanup, no auto-merge
• STANDARD_BRANCH_RULESET: Requires PR, prevents force push and branch deletion

New Functions

• createBranchProtectionRuleset(): Creates standard branch protection
• updateRepositorySettings(): Updates repo settings to match standard
• ensureStandardConfiguration(): Ensures existing repos have correct settings

Repository Creation

• Updated createRepository() to use auto_init: true (creates initial README automatically)
• Applies standard settings at creation time
• Applies branch protection ruleset after creation

Existing Repository Enforcement

• Added ensure-settings action type
• Checks all existing repos and applies standard configuration
• Updates merge settings and creates rulesets if missing

Reporting

• Updated formatSyncReport() to show "Ensure settings" actions
• Added summary count for settings enforcement

Configuration Enforced

Merge Settings:

• ✅ Squash merge only (ensures 1 PR = 1 commit for fair voting)
• ❌ Merge commits disabled
• ❌ Rebase merge disabled
• ✅ Delete branch after merge (keeps repository clean)
• ❌ Auto-merge disabled (worlddriven bot handles merging)
• ❌ Update branch disabled (prevents manipulation during voting)

Branch Protection:

• ✅ Require pull request (enables democratic voting)
• ✅ Prevent force push (protects contribution history for voting weights)
• ✅ Prevent branch deletion (protects main branch)
• ✅ 0 required reviews (worlddriven handles approval logic)
• ✅ No bypass actors (true democracy - everyone participates)

Why This Matters

This standardization ensures:

1. Fair Voting: Squash-only means 1 PR = 1 commit = fair contribution counting
2. History Integrity: Force push protection preserves accurate contribution history
3. Democratic Process: PR requirement enables the voting workflow
4. Consistency: All repos follow the same rules
5. Clean History: Branch cleanup and squash commits maintain readable history

Test Plan

• Code compiles and script runs
• Syntax validated with dummy token
• Will test with real token when merged to worlddriven org
• Verify settings applied to documentation repository
• Verify settings applied to webapp repository
• Test creating a new repository applies all settings

Token Permissions Required

For this to work, WORLDDRIVEN_GITHUB_TOKEN needs:

• ✅ Repository Administration: Read and write (for settings and rulesets)
• ✅ Contents: Read and write (for initial commits)
• ✅ Organization Administration: Read and write (for repo creation/deletion)

Closes: Related to standardizing worlddriven organization configuration