fix: publish automation PR statuses

[loadinglucian]

Adds GitHub commit statuses for the required contexts only after the exact-head dispatched CI and Protected controls validators pass. Retains the Actions check-run evidence and validator URLs, then waits for the PR rollup before ordinary merge.\n\nVerified: mise-php 7 tests; cross-repository A00-A20 digest sha256:965a10409c051cf22d6864c86c91e6ca58c440779c5690d37e1098a758fee568.

Summary by CodeRabbit

• New Features

  • Successful validation now publishes visible commit statuses alongside check results, with direct links to validator details.

• Documentation

  • Updated repository guidance to reflect the new validation evidence and status publication process.

• Chores

  • Added workflow permission support for publishing commit statuses.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: bd8bbd02-a7b0-422d-8e12-ebdf0e5a8db0

📥 Commits

Reviewing files that changed from the base of the PR and between a46cf83 and 5fe8eb6.

📒 Files selected for processing (4)

• .github/workflows/maintenance-consumer.yml
• docs/repository-settings.md
• scripts/dispatch-pr-checks
• test/test_maintenance.py

---

📝 Walkthrough

Walkthrough

The PR dispatcher now publishes successful validator commit statuses for the PR head SHA. The maintenance workflow grants permission to write statuses, tests assert the new behavior, and repository documentation describes the updated evidence.

Changes

Validator status publication

Layer / File(s)	Summary
Status publication and workflow wiring .github/workflows/maintenance-consumer.yml, scripts/dispatch-pr-checks, test/test_maintenance.py, docs/repository-settings.md	The dispatcher posts successful statuses for each validator using its name and details URL, the workflow grants statuses: write, tests assert these settings, and documentation reflects the updated publication behavior.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• Bigpixelrocket/mise-php#8: Introduced the related maintenance-consumer readiness orchestration workflow.
• Bigpixelrocket/mise-php#17: Refactored the same deterministic check dispatch and polling flow.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/publish-automation-statuses

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}