feat: enforce standard GitHub configuration for all repositories

[TooAngel]

Summary

Implements automated enforcement of standard GitHub repository settings across all worlddriven organization repositories to ensure consistency and support the democratic merge workflow.

Changes

Standard Configuration Constants

• STANDARD_REPO_SETTINGS: Enforces squash-only merge, branch cleanup, no auto-merge
• STANDARD_BRANCH_RULESET: Requires PR, prevents force push and branch deletion

New Functions

• createBranchProtectionRuleset(): Creates standard branch protection
• updateRepositorySettings(): Updates repo settings to match standard
• ensureStandardConfiguration(): Ensures existing repos have correct settings

Repository Creation

• Updated createRepository() to use auto_init: true (creates initial README automatically)
• Applies standard settings at creation time
• Applies branch protection ruleset after creation

Existing Repository Enforcement

• Added ensure-settings action type
• Checks all existing repos and applies standard configuration
• Updates merge settings and creates rulesets if missing

Reporting

• Updated formatSyncReport() to show "Ensure settings" actions
• Added summary count for settings enforcement

Configuration Enforced

Merge Settings:

• ✅ Squash merge only (ensures 1 PR = 1 commit for fair voting)
• ❌ Merge commits disabled
• ❌ Rebase merge disabled
• ✅ Delete branch after merge (keeps repository clean)
• ❌ Auto-merge disabled (worlddriven bot handles merging)
• ❌ Update branch disabled (prevents manipulation during voting)

Branch Protection:

• ✅ Require pull request (enables democratic voting)
• ✅ Prevent force push (protects contribution history for voting weights)
• ✅ Prevent branch deletion (protects main branch)
• ✅ 0 required reviews (worlddriven handles approval logic)
• ✅ No bypass actors (true democracy - everyone participates)

Why This Matters

This standardization ensures:

1. Fair Voting: Squash-only means 1 PR = 1 commit = fair contribution counting
2. History Integrity: Force push protection preserves accurate contribution history
3. Democratic Process: PR requirement enables the voting workflow
4. Consistency: All repos follow the same rules
5. Clean History: Branch cleanup and squash commits maintain readable history

Test Plan

• Code compiles and script runs
• Syntax validated with dummy token
• Will test with real token when merged to worlddriven org
• Verify settings applied to documentation repository
• Verify settings applied to webapp repository
• Test creating a new repository applies all settings

Token Permissions Required

For this to work, WORLDDRIVEN_GITHUB_TOKEN needs:

• ✅ Repository Administration: Read and write (for settings and rulesets)
• ✅ Contents: Read and write (for initial commits)
• ✅ Organization Administration: Read and write (for repo creation/deletion)

Closes: Related to standardizing worlddriven organization configuration

[worlddriven]

🤖 Worlddriven Status

📊 Live Status Dashboard

🗓️ Merge Date: 2025-11-04 at 10:54:31 UTC (today)
📅 Started: 2025-11-01 at 14:20:14 UTC
⚡ Speed Factor: 0.29 (71% faster due to reviews)
✅ Positive votes: 5/7 contribution weight (coefficient: 0.71)
📈 Base Merge Time: 10 days → Current: 3 days

🎯 Want to influence when this merges?

Your review matters! As a contributor to this project, your voice helps determine the merge timeline.

How to review:

1. Check the changes
   

2. Leave your review
   

Your options:

• ✅ Agree & Speed Up: Approving makes this merge faster
• ❌ Disagree & Slow Down: Requesting changes delays the merge

💡 Pro tip: The more contributors who agree, the faster this gets merged!

📊 View detailed stats on the dashboard

📋 Recent Activity

• 2025-11-04, 11:52:35 - Pull request merged by worlddriven ✅

---

This comment is automatically updated by worlddriven