feat: add apply-rulesets.sh to create pr-quality repository ruleset

[claude]

Summary

• Adds scripts/apply-rulesets.sh which creates or updates the standard pr-quality repository ruleset on any petry-projects repo via the GitHub REST API
• Implements all settings required by standards/github-settings.md#pr-quality

Ruleset configuration

Setting	Value
Target branch	Default branch (~DEFAULT_BRANCH)
Enforcement	Active
Required approving reviews	1
Dismiss stale reviews on push	Yes
Required review thread resolution	Yes
Require code owner review	Yes
Require last push approval	Yes
Allow force pushes	No
Allow deletions	No
Squash-only merges	Enforced via required_linear_history

Usage

After merging, run with an admin token to apply the ruleset to a repo:

# Apply to a specific repo
GH_TOKEN=<admin-token> ./scripts/apply-rulesets.sh .github

# Dry-run to preview changes
DRY_RUN=true GH_TOKEN=<admin-token> ./scripts/apply-rulesets.sh .github

# Apply to all org repos
GH_TOKEN=<admin-token> ./scripts/apply-rulesets.sh --all

Note on compliance closure

The compliance audit checks the live GitHub API for the pr-quality ruleset — merging this PR adds the tooling. Running the script with admin credentials is the final step to close the finding.

Closes #48

Generated with Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[don-petry]

Closing — superseded by #71 which implements code-quality rulesets with dynamic check detection. The pr-quality ruleset from this PR should be added to apply-rulesets.sh as a follow-up.