Summary

• Expand CRITICAL_PATH_PATTERN in the pr-automation skill to cover root-level config files, CI/CD configs, docs, and security-sensitive files
• Replace the narrow ^scripts/pr-automation\.sh with ^scripts/ to protect all automation scripts
• Add patterns for: .github/, AGENTS.md, CLAUDE.md, readme.md, package.json, bun.lock, electron-builder.yml, electron.vite.config.ts, tsconfig.json, uno.config.ts, .pre-commit-config.yaml, codecov.yml, entitlements.plist, docs/, and all lint/format config files

Test plan

• Verify that a PR touching package.json is routed to bot:ready-to-merge instead of auto-merged
• Verify that a PR touching scripts/ (not just pr-automation.sh) triggers critical path detection
• Verify that a PR with no changes to these patterns still auto-merges as expected