chore: update tend workflows (0.2.6 → 0.2.7)

[prql-bot]

Regenerates the eight tend-* workflows with tend 0.2.7, up from 0.2.6. The files themselves change only in the generator banner and the max-sixty/tend/claude@ pin — the behavior below comes from the action and the skills it loads.

What the bot does differently once this lands:

• Each session loads less skill text before it starts work. running-in-ci and review keep the rules every session needs and move guidance for rarer actions — opening a PR, pushing, monitoring CI, posting a comment, dismissing an approval — into reference files read on demand. running-in-ci drops from 52 KB to 20 KB and review from 41 KB to 25 KB, leaving more of each session's context for this repo's own code (skills: shrink the guidance every session loads max-sixty/tend#1215).
• A script decides whether a PR review approves, instead of prose. poll_pr_checks.py approval waits for pending checks to settle and prints one approve: or withhold: verdict, approving past a red check only when every failing check's run was cancelled. The review pre-flight's already_reviewed check now reads a rewrite-aware anchor, so a force-pushed head no longer counts as already reviewed (skills: shrink the guidance every session loads max-sixty/tend#1215, review: decide the pre-approval check in the script, not in prose max-sixty/tend#1217).
• tend-review-runs reads open Dependabot security alerts. An alert open for more than a few days with no PR naming its package is reported as live work. This repo's default branch currently has six open alerts, so expect that scan to start surfacing them (skills(review-runs): check open Dependabot alerts in the live scan max-sixty/tend#1214).
• tend-review-runs re-queries a workflow's last successful run before reporting it as still red, since that lookup can return a cached row weeks old — one source of false "still failing" reports (fix(review-runs): re-query the closure read before reporting a path as still red max-sixty/tend#1210).
• zsh here-documents work inside the agent sandbox. TMPPREFIX now points at the writable temp directory rather than zsh's default under the read-only root (fix(sandbox): point zsh here-document scratch at the writable temp dir max-sixty/tend#1211).

This repo's .config/tend.yaml pins no model, so nothing there needed adjusting; the regeneration left it unchanged.

Full comparison: max-sixty/tend@0.2.6...0.2.7