fix: resolve conflicts for PR #413

Rebase onto current prgs/master and patch create_pr duplicate-gate test
with auth header mock to match post-rebase recheck path.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

tests/test_issue_work_duplicate_gate.py

@@ -189,7 +189,8 @@ class TestMcpDuplicateRecheck(unittest.TestCase):
         "forbidden_operations": [],
         "audit_label": "test-author",
     })
-    def test_create_pr_returns_handoff_on_duplicate(self, _profile, mock_gate):
+    @patch("mcp_server.get_auth_header", return_value="token x")
+    def test_create_pr_returns_handoff_on_duplicate(self, _auth, _profile, mock_gate):
         self._write_lock()
         mock_gate.return_value = {
             "block": True,