fix(governance): scope branch-cleanup PR search, harden git-guard vs global opts, reconcile mcp-task-manager-server license (#10114, #10434, #10117)

[mrveiss]

Thinking Path

Three governance/hooks/license correctness issues from prior discovery rules.

What Changed

• fix(governance): scope branch-cleanup merged-PR confirmation search (avoid broad --search match) #10114 — branch-cleanup merged-PR confirmation used an unscoped gh pr list --search "$n" (over-matches superstrings/body/comments). Added shared merged_pr_for_issue() to scripts/lib/branch-guards.sh (per the fix(governance): harden automated branch pruning against deletion race (#10035, #9917) #10112 shared-lib pattern) that filters merged PRs by exact closingIssuesReferences membership; replaced all 3 call sites (branch-cleanup.yml, cleanup-worktrees.sh ×2). Verified: superstring 9943→reject, exact 10032→accept.
• discovery(hooks): block-dangerous-commands.sh git guard bypassed by a global option (git -c foo=bar checkout <branch>) #10434 — block-dangerous-commands.sh git guard was bypassed by a global option (git -c x=y checkout). Added a GNU-grep-3.7-safe GIT_GLOBAL_OPTS ERE fragment (no fixed-length lookbehind) tolerating repeated -c/-C/--git-dir, wired into all four checkout/switch anchors. git -c x=y checkout foo now blocks; benign git -c x=y status still passes.
• discovery(license): mcp-task-manager-server LICENSE is GPL-3.0 but package.json declares ISC — Apache-2.0 incompatible #10117 — mcp-task-manager-server shipped a verbatim GPL-3.0 LICENSE but package.json declared ISC (leftover npm init scaffold default). Reconciled metadata to reality: package.json license → GPL-3.0-only; THIRD-PARTY-NOTICES entry UNRESOLVED → RESOLVED, documenting the GPL-3.0-only determination + remaining Apache-2.0 incompatibility (Umbrella: Relicense AutoBot to Apache-2.0 #9826). No deletion — keep/remove/isolate decision left to the maintainer.

Verification

• bash .claude/hooks/block-dangerous-commands_test.sh → 33 passed, 0 failed (was 27; +6 cases: 4 block forms for the bypass, 2 benign global-opt allow forms).
• jq scoping logic verified against superstring + exact cases.
• Closes fix(governance): scope branch-cleanup merged-PR confirmation search (avoid broad --search match) #10114, discovery(hooks): block-dangerous-commands.sh git guard bypassed by a global option (git -c foo=bar checkout <branch>) #10434, discovery(license): mcp-task-manager-server LICENSE is GPL-3.0 but package.json declares ISC — Apache-2.0 incompatible #10117.

Model Used

Claude Opus 4.8 (general-purpose subagent).

[github-actions]

✅ SSOT Configuration Compliance: Passing

🎉 No hardcoded values detected that have SSOT config equivalents!