chore: update tend workflows (0.1.18 → 0.1.19)

[prql-bot]

Nightly regeneration of tend's generated workflow files (uvx tend@latest init). The diff is mechanical — the version stamp and the max-sixty/tend/claude@ action ref in each of the eight tend-*.yaml files.

tend version: 0.1.18 → 0.1.19

Notable changes

• Instruction-file pinning hardened — every instruction file the CLIs read is now pinned at any depth, on both the Claude and Codex harnesses (fix(security): pin every instruction file the CLIs read, at any depth, on both harnesses max-sixty/tend#1005), and the harness's own settings.local.json is excluded from the adopter checkout (fix(claude): exclude the harness's settings.local.json from the adopter checkout max-sixty/tend#1029).
• Check-polling fixes — the rollup is now paged rather than refused past 100 contexts (fix(scripts): page the check rollup instead of refusing past 100 contexts max-sixty/tend#999), and an unusable SHA is rejected before the poll loop starts (fix(scripts): reject an unusable SHA before the poll loop max-sixty/tend#1046). This repo's tests matrix registers well over 100 contexts, so the paging fix is the one that bites here.
• Sandbox context — the CI agent is now told it runs unprivileged and where root lives (Tell the CI agent it runs unprivileged, and where root lives max-sixty/tend#1041), what its PATH can't reach (Name what the sandbox agent's PATH couldn't reach max-sixty/tend#1047), and sandbox_setup gets the same GitHub context as the agent (feat(sandbox): name GITHUB_WORKFLOW for sandbox_setup commands max-sixty/tend#1057, feat(sandbox): give sandbox_setup the same GitHub context as the agent max-sixty/tend#1059).
• Skill refinements — review stops at the review on PRs the bot authored (skills(review): stop at the review on PRs this bot authored max-sixty/tend#1007) and scales depth to what checking the change requires; ci-fix filters the outage-escalation query by title rather than label alone (skills(ci-fix): filter the outage-escalation query by title, not label alone max-sixty/tend#1015); nightly leaves the tend-outage tracker for review-runs to drain (fix(nightly): leave the tend-outage tracker for review-runs to drain max-sixty/tend#1021) and confirms a resolved PR actually left the conflicted state before polling CI (fix(nightly): confirm a resolved PR left the conflicted state before polling CI max-sixty/tend#1032).
• Secrets rule extended to process listings (docs(running-in-ci): extend the Secrets rule to process listings max-sixty/tend#1044, fix(running-in-ci): attribute the Secrets rule's leak to each harness max-sixty/tend#1056) — the prohibition now names the leak path per harness rather than covering only env introspection.

Full compare: max-sixty/tend@0.1.18...0.1.19