Github Lessons

Fork PRs fail DCO or related CI even when the code is fine. Agents see red X and thrash. Sometimes quality bots also fai

Agent cannot push to a fork or open PRs; or a PAT is over-scoped (`admin:org`) and risky if leaked.