Apply the PhotoCleaner round-1 feedback batch

[ptr727]

Six of the seven downstream feedback items from the PhotoCleaner governance carry (ptr727/PhotoCleaner#14 feedback comment); item 3 shipped separately as #405.

1. MD033 — CODESTYLE no longer lists it among the deliberately disabled rules; the canonical config enables it (inline HTML for comments only), and the text now says so.
2. xUnit dynamic-skip carve-out — adopting the downstream wording: Assert.Skip/Assert.SkipWhen is control flow, not an assertion, and stays native.
3. Canonical JSON indentation — version.json (tabs) and repo-config/settings.json (2-space) reindented to the fleet's 4-space convention. CRLF preserved, content unchanged.
4. Ancestry vs content — the audit's branch check was already content-based (and correctly silent on PhotoCleaner); the hand-written artifacts were wrong. The PhotoCleaner report's Develop Drift now classifies the promotion ancestry gap as benign, the erroneous registry driftNote is gone (it also tripped the pending-marker freshness check), and reports/_template.md now instructs classifying by content, not commit count.
5. Codecov stores — spec/secrets.json claims both stores with the rationale: Dependabot-triggered runs read the Dependabot store, so without that copy coverage upload silently skips on every bot PR.
6. Runbook mechanized — the copilot-instructions manifest entry gains sections (incl. "GitHub Copilot Review Runbook"); live-verified — PhotoCleaner now surfaces both missing headings.

Verification

validate.py green, --selftest passes, all JSON valid, markdownlint clean, CRLF preserved. Live: PhotoCleaner post-round-1 audit shows the two new section DRIFTs and no branch/driftNote noise (13 findings, down from 15 after its carry landed).

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Applies a batch of downstream governance feedback items from PhotoCleaner by tightening spec/audit semantics, updating documentation to match canonical lint/testing intent, and normalizing a couple of JSON files to the fleet indentation convention.

Changes:

• Normalize JSON indentation in version.json and repo-config/settings.json to the fleet 4-space convention (content unchanged).
• Clarify develop-vs-main drift reporting to classify by tree/content (benign promotion ancestry gaps) and remove the corresponding incorrect registry drift note.
• Update governance specs and docs: add required sections coverage for .github/copilot-instructions.md, correct MD033 guidance, add xUnit dynamic-skip carve-out, and require Codecov token in both Actions + Dependabot secret stores.

Reviewed changes

Copilot reviewed 6 out of 8 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
version.json	Reindent to 4 spaces for canonical JSON formatting.
spec/secrets.json	Require Codecov token in both secret stores and explain why.
spec/files.json	Add sections coverage for .github/copilot-instructions.md in the baseline manifest.
reports/photocleaner/audit.md	Reclassify develop/main commit-count divergence as benign when trees match (promotion merge ancestry).
reports/_template.md	Update template guidance to classify drift by content, not commit count.
repo-config/settings.json	Reindent to 4 spaces for canonical JSON formatting.
registry/repos.json	Remove erroneous drift note about develop trailing main by promotion merge commits.
CODESTYLE.md	Update markdownlint MD033 guidance and document xUnit dynamic skip carve-out.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 8 changed files in this pull request and generated no new comments.