docs(pm,agents,settings): write-identity locks 1–4 — deny MCP content writes, REST-only dev writes with api_writes, batch default 2, user-account roles
#7421
single-claim-path-guard.yml
on: pull_request
No other open PR may claim the same single-writer path
14s