chore: align harness with automation prompts

[zacharias-ona]

The automation prompts in docs/automations.md reference files, labels, and conventions
that were missing or stale in the repo. This PR aligns the harness so automations work
against the actual repo state, and adds the automation YAML definitions.

What changed

New files:

• .agents/design.md — visual design spec covering colors (oklch tokens), typography
  (JetBrains Mono), spacing (4px base), components (shadcn/ui overrides), editor blocks,
  interaction patterns, responsive breakpoints, and accessibility requirements
• docs/automations.md — complete automation prompt reference (previously existed on disk
  but was never committed)
• .ona/automations/*.yaml — 12 Ona AI automation definitions (PR Reviewer, Post-Merge
  Verifier, Feature Builder, Bug Fixer, UI Verifier, Feature Planner, Daily Metrics,
  Tweet Drafter, Weekly Recap, Incident Responder, Performance Monitor, Automation Auditor)

Updated files:

• AGENTS.md — fixed test command (npm run → pnpm), added needs-human label and
  label lifecycle, added design.md to routing table, fixed project structure
  (middleware.ts → proxy.ts, removed nonexistent scripts/ dir)
• .agents/README.md — added design.md to contents table, added numbered reading order
  for agents
• .agents/architecture.md — noted data model is planned (no migrations yet), added
  manifest.ts and root Sentry config files to component map
• .agents/quality.md — graded Infrastructure B, API routes C, UI components C; populated
  Known Gaps with specific findings (missing tests, font mismatch, no shadcn/ui init)

GitHub labels created:

• Status: status:backlog, status:in-progress, status:in-review, status:done
• Priority: priority:1, priority:2, priority:3
• Type: feature, chore, performance
• Flag: needs-human

Verification

• Every .agents/*.md file referenced in docs/automations.md exists
• pnpm lint && pnpm typecheck && pnpm test passes
• All gh label names match AGENTS.md documentation
• Project structure in AGENTS.md matches actual src/ layout

Manual setup required

Automation registration via ona ai automation create returned permission_denied.
After merge, an org admin needs to:

1. Create a webhook — ona webhook create --name "Memo PR Events" --type repository --scope "gitpod-io/memo" --provider github, then register the payload URL + secret in GitHub repo settings → Webhooks
2. Register each automation — for f in .ona/automations/*.yaml; do ona ai automation create "$f"; done
3. Configure Sentry — set SENTRY_AUTH_TOKEN as a project secret for the Incident Responder
4. Configure Twitter — create scripts/tweet.ts and set Twitter API credentials for the Tweet Drafter

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
memo	Ready	Preview, Comment	Apr 14, 2026 7:49pm

[zacharias-ona]

Review: No blocking issues found ✅

Documentation-only changes. Verified:

• Project structure in AGENTS.md matches actual src/ layout (scripts/ removed, manifest.ts added, proxy.ts path corrected)
• Test commands fixed to pnpm (matches package manager)
• All files referenced in docs/automations.md exist on disk
• .agents/design.md is well-structured and consistent with existing conventions
• Quality grades in .agents/quality.md match observable repo state (no tests for health route, Geist vs JetBrains Mono mismatch noted)
• No code changes, no tests needed

Merging as chore PR.