feat: upgrade peribolos workflows and add repos to org/config.yaml

[jflowers]

Description

Upgrade all three peribolos workflows to match zero-dot-force standards, and add a repos: section to org/config.yaml with descriptions from GitHub.

org/config.yaml Changes

• Change members_can_create_repositories: true → false
• Add repos: section with all 9 repositories:
  • .github: "Organization-wide GitHub configuration"
  • containerfile: ""
  • dewey: "Knowledge graph MCP server for AI agents..."
  • gaze: "Static analysis for Go that detects side effects..."
  • homebrew-tap: ""
  • intake-kit: "A CUE-validated PRD authoring and review system..."
  • replicator: "Go MCP server providing 53 tools for AI agent orchestration..."
  • unbound-force: "AI agent swarm superhero team"
  • website: ""
• Each repo: default_branch: main, description, has_projects: true

Workflow Upgrades

peribolos-validate.yml

• Rename to "Peribolos: Validate"
• Trigger on push/PR to main (remove path filter restriction)
• Add Go setup (setup-go@b7ad1dad v7.0.0)
• Add go mod tidy + go mod vendor
• Add go test ./...
• Pin checkout to @3d3c42e5 (v7.0.1)

peribolos-sync.yml

• Rename to "Peribolos: Apply"
• Add --fix-repos flag
• Add --require-self=false, --ignore-enterprise-teams, --ignore-secret-teams
• Change guard to owner-based: github.repository_owner == 'unbound-force'
• Update action versions: checkout@3d3c42e5 (v7.0.1), setup-go@b7ad1dad (v7.0.0), create-github-app-token@bcd2ba49 (v3.2.0)

peribolos-drift.yml

• Rename to "Peribolos: Drift"
• Add GH_REPO env var
• Add --fix-repos flag
• Change guard to owner-based
• Update action versions: upload-artifact@043fb46d (v7.0.1)

References

• Modeled on: zero-dot-force/.github/.github/workflows/peribolos-*.yml
• Modeled on: zero-dot-force/.github/org/config.yaml