Process is not autonomous: hanging rework PRs, approval for friction PRs, rare updates #33

Owner's report (the repository owner, from running dpcli in projects and watching this hub).

• A PR sent back with rework stays open: nothing reworks it (nightly nightly: workflow template 100 tokens lighter #31 waited for the next nightly).
• GitHub asked the owner to approve Actions runs on a bot-opened PR (fixed in repo settings: approval only for accounts new to GitHub).
• In projects, harness-retro waits for the user's approval before it applies changes or sends a friction PR. The owner wants dpcli fully autonomous: on the hub, in CI and in projects. The user is told afterwards.
• Projects update rarely: update --auto runs once a day, and it skips while .dpcli sits on an improve/* branch waiting for its PR.
• Own PR status is checked once a day, so reworks and merges are seen late.

Wanted: rework → fix → test → review again by itself until it passes, with no human step anywhere.