Standing authorisation from the user: a verified fix goes out in the same turn
it is finished, rather than waiting in the working tree for approval.

Written with the order fixed (verify, then commit, then push) and with the
boundary spelled out, because a push here is a deploy to every tenant at once
— entrypoint.sh runs migrate --force and db:seed on every container start, and
there is no staging. Features, schema changes and anything destructive still
get confirmed.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>