SRE-797: Require Linear issue IDs on Claude-authored PRs

[claude]

Requested via Slack thread

What

Before: any PR opened by a bot account (pull_request.user.type == 'Bot') skipped the "PR title / Linear Issue ID" check entirely — including PRs authored by Claude.

After: only dependabot[bot] and hash-worker[bot] (the account that actually opens renovate PRs) skip the check. PRs opened by Claude — or any other GitHub App / bot account — now fail the check unless the title starts with a Linear issue ID, same as human-authored PRs.

How

In .github/workflows/preflight-pr-title.yml, the job-level if condition on the check ("Linear Issue ID") job no longer tests github.event.pull_request.user.type != 'Bot'. It now uses an explicit allowlist:

!contains(fromJSON('["dependabot[bot]", "hash-worker[bot]"]'), github.event.pull_request.user.login)

The event-name conditions are unchanged. The header comment and the failure/help message in the step summary are updated to match the new behaviour.

Exempt logins confirmed by Tim: dependabot[bot] and hash-worker[bot] (renovate[bot] itself does not open PRs here).

Closes SRE-797.

[cursor]

PR Summary

Low Risk
CI-only change to PR title validation; no application runtime or security logic affected.

Overview
The PR Title preflight no longer skips the Linear issue ID check for every GitHub Bot user. The check job now runs for all PR authors except dependabot[bot] and hash-worker[bot] (renovate), using an explicit login allowlist in the job if instead of user.type != 'Bot'.

Claude and other GitHub App–opened PRs are subject to the same title rule as human PRs. Header comments and the failure step summary text were updated to describe the narrowed exemption.

^{Reviewed by Cursor Bugbot for commit 858506b. Bugbot is set up for automated code reviews on this repo. Configure here.}