fix(governance): let organization sweep finish

[opencode-agent]

Summary

• keep the 15-minute and 30-minute organization sweeps from cancelling each other
• raise the organization sweep timeout from 30 to 60 minutes
• enable review dispatch, auto-merge, and branch updates on scheduled sweeps
• cover the schedule and concurrency contract with focused tests

Incident evidence

• organization sweep run 30538915686 was cancelled at exactly 30 minutes while its queue scan was still active
• Gyeot PR [codex] harden OpenCode agent evidence gate #11's exact-head OpenCode run completed without model output, but the scheduled sweep could neither retry review nor merge because all three schedule mutation flags evaluated false

Validation

• python3 -m pytest -q tests/test_required_workflow_queue_contract.py -k 'org_queue_sweep' — 5 passed
• actionlint .github/workflows/pr-review-merge-scheduler.yml
• focused dynamic scheduler workflow contract assertion
• git diff --check

[cwl-noema-review]

Pipeline-defect force-merge approval

This is an explicit independent credential approval for a central review-pipeline repair; it is not represented as an OpenCode or Noema model review.

• Head SHA: 7b6c41c1aa4d2c03f6ca5c553b5fe30e6336b403
• Current-head checks: 45, all terminal success, neutral, or skipped with zero blockers
• Local validation: actionlint; test_opencode_agent_contract.py 38 passed; test_required_workflow_queue_contract.py 49 passed
• Security evidence: current-head Strix completed successfully
• Merge preview: exact base/head parents and tree validated before approval
• Authorization: operator explicitly permitted force-merge for pipeline defects

[seonghobae]

Superseded by #677. PR #677 contains exact head commit 67db8cf and all four commits from this PR, plus the follow-up paid Zen fallback. Closing the strict subset to keep one review and merge source of truth.