[telivity-otaip]

Summary

auto grind now copies the target repository into a scratch clone under the system temp directory and runs the scan, install, build, and tests there. It does not create worktrees or delete branches in the checkout that is open.

• pnpm install and pnpm run -r build run once per grind. After a patch, only the workspace package that contains the edited file is rebuilt, when that package has a build script.
• The default scan is type errors and TODO markers, and the default task cap is 1. --full adds test failures, coverage gaps, and dead code, one scanner after another. Dead-code usage search is batched.
• Jailed commands run under nice -n 19 when nice is on PATH.
• --apply pushes a new auto/* branch and opens a draft pull request. If that branch already exists on the remote, the push and pull request are skipped. The push is not forced.

Test plan

• pnpm typecheck
• pnpm test
• Branch creation issues no worktree or branch -D against the source repository
• Install and recursive build run once per runLoop
• The default flag set skips test, coverage, and dead-code scanners
• gh pr create arguments include --draft
• An existing remote branch is not force-pushed