[CMPAAAAAAAA-15] finalize public reviewable staffing ops baseline

[bigbear0102]

Linked Paperclip Issue

• CMPAAAAAAAA-15

Summary

• Push the public-reviewable staffing ops baseline from CMPAAAAAAAA-15/public-reviewable-baseline.
• Switch bigbear0102/staffing-ops to public so GitHub Free can enforce branch governance on main.
• Add the staffing ops thin-slice code, CI checks, PR governance, masked pilot proof generation, and demo bundle automation needed for external review.

Risk Notes

• main is now protected, but this PR still depends on GitHub Actions completing from the public repo baseline before merge.
• Public visibility means future pilot evidence must stay masked and synthetic; raw partner exports must remain out of Git.
• CMPAAAAAAAA-13 stale run cleanup still remains on the separate wedge finalization lane.

Verification Notes

• pnpm check
• pnpm demo:bundle
• gh api --method PUT repos/bigbear0102/staffing-ops/branches/main/protection --input /tmp/main-protection.json

[bigbear0102]

Superseded by PR #4, which now carries the thin-slice baseline plus release-path normalization directly against main. Closing this older draft to keep a single active implementation path.