docs: record CI/CD learnings in plans and lessons

[d-oit]

Records session learnings from the PR sweep (#624-#645) to prevent repeating CI/CD pitfalls:

• Plan 115 marked RESOLVED (gitleaks v2.3.9 pin + allowlist extension, verified by successful manual scan)
• Plan 116 (new): session CI/CD learnings — yamllint block scalars, review-thread merge gates, gitleaks version pinning, merge-state staleness
• LESSONS.md: LESSON-024 (gitleaks v3 license), LESSON-025 (yamllint), LESSON-026 (bot threads block merges)
• lessons.jsonl: matching machine-readable entries
• AGENTS.md: distilled Learnings section (dual-write per learn skill)

Zero new markdownlint errors introduced (143 pre-existing only).

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
do-knowledge-studio	Ready	Preview, v0	Aug 11, 2026 7:36pm

[deepsource-io]

DeepSource Code Review

We reviewed changes in 6ef98fa...148d944 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Aug 11, 2026 7:35p.m.	Review ↗
Python		Aug 11, 2026 7:35p.m.	Review ↗
Shell		Aug 11, 2026 7:35p.m.	Review ↗
SQL		Aug 11, 2026 7:35p.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[owl-watch]

🦉 OwlWatch scanned this change — no actionable findings.