feat: add bounded CI automation and hardware readiness audit

[SayandB]

Closes #22
Closes #23
Closes #24
Task: T-007, T-008, T-009

Summary

• pin Ruff/CI and install pre-commit/conventional-commit hooks
• add bounded backlog verification and state persistence
• add Gemini PR-Agent review with a fail-closed review-output check
• add read-only Linux GPU/CUDA/kernel-header/BTF audit

Tracking

Primary milestone: M1 — Delivery backbone and governance. Also advances T-008 under M4. Owner: SayandB.

Validation and dependencies

• pytest -q, Ruff check/format, pre-commit, YAML and shell syntax checks passed
• Gemini requires repository secret GEMINI_API_KEY; Linux host audit output remains pending.

No independent reviewer is available among repository collaborators; maintainer review is still required.

[github-actions]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 3 🔵🔵🔵⚪⚪

🧪 PR contains tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Missing Environment Variable The task-linkage step attempts to read os.environ.get('PR_BODY', ''), but the workflow does not map github.event.pull_request.body to the PR_BODY environment variable. Consequently, the check will always evaluate an empty string and incorrectly fail valid pull requests. - name: Confirm task or issue linkage run: | python - <<'PY' import os body = os.environ.get('PR_BODY', '')

[SayandB]

Review triage: the “Missing Environment Variable” finding is a false positive. The task-linkage job maps github.event.pull_request.body to PR_BODY in the same workflow, and the live task-linkage checks pass. No code change is needed for this finding.

[SayandB]

Tracking update: linked to issues #22–#24 (T-007, T-008, T-009), primary milestone M1, owner SayandB, and labeled enhancement, documentation, and review effort 3/5. Gemini AI review and required CI checks run here. T-008 remains pending the read-only audit on the remote Linux host. Independent reviewer assignment is pending another repository collaborator.