Actionable health board: one-tap prompts, links, dev-box publish

[Jammy2211]

Closes #151. The Heart-board leg of the one-tap dashboard rollout (PyAutoMind pattern), per the approved plan.

The board becomes actionable

• Structured blockers — every red/yellow/stale reason resolves its repo (from the "repo: problem" convention) and the cached failing-run URL (ci_status.url), and carries a copyable prompt: /bug Heart board: <reason> — failing run: <url> (stale reasons get a /health re-run nudge instead, honouring "re-run, don't fix").
• Pages html — 📋 buttons (inline clipboard JS, window.prompt fallback) on each blocker and actionable row; repo + run ↗ links; palette untouched. Failing repo-group rows link their runs too.
• md — blockers linked, prompts in a collapsed <details> of fenced blocks (GitHub's fenced-code copy button makes each one one-tap on the web).
• json — schema v2 (additive): blockers, per-section links/action/observed_ago.
• Observed drift/timing rows carry pyauto-heart fix drift / fix timing <project> actions.

Dev-box rows become usable

• Grey rows now say what they watch and copy pyauto-heart tick && pyauto-heart publish.
• New pyauto-heart publish (heart/publish.py): distills the LOCAL board's local-only families into state/devbox_board.json — states/summaries/counts only, detail lines naming local filesystem paths are scrubbed (test-pinned) — then commits+pushes to main (branch-guarded, rebase-retry). Observer rule holds: Heart writes only its own repo.
• The cloud render auto-detects the committed file and fills the grey rows, each stamped "observed Nh ago on the dev box", expiring back to grey after 48 h.

README + declutter

• README restructured on the Mind pattern: 4-line organ opening → live-board paragraph → How PyAutoHeart works → CLI examples → pointers. The auto-updated heart:begin/end block becomes a brief strip (new --md-brief: verdict + linked blockers + board link); the full table lives on the Pages board and the step summary.
• New REFERENCE.md (CLI table, run model, state layout, verdict tiers incl. STALE, publish flow) absorbs health_agent/capabilities.md; the stale pyautobuild_boundary_audit.md is retired; AI_POLICY.md/CONTRIBUTING.md move under .github/ (zero inbound references; mirrors PyAutoMind #248).
• heart-health.yml: README step uses --md-brief; the [heart-health] issue body links failing runs.

Deviation from the plan's detail: fix.py needed no builder extraction — the board's payloads are short slash-prompts/commands, and the long context-bundling prompts stay fix.py's job.

Verification

• pytest tests/ — 495 passed (11 new tests: blocker structure, html copy payloads, md links, md-brief, unobs actions, devbox merge fresh/stale/no-override, publish distillation + privacy scrub + round-trip).
• Rendered against the real local state: --cloud --md, --md-brief, and --cloud --devbox <dry-run output> --html → rows show "observed 3h ago on the dev box".
• The html self-containment test now asserts "no external assets" (no src=/<link/fetch; every URL sits in an href) — inline script is required by the clipboard buttons.

After merge: workflow_dispatch heart-health.yml, verify the live page/badge/README strip, then run pyauto-heart publish from the dev box and re-dispatch to see the age-stamped rows live.

🤖 Generated with Claude Code