[ryanleecode]

Adds .mergify.yml for pnpm-release-management: extends: .github (shared org policy in systemfsoftware/.github) plus one default queue rule naming this repo's CI checks.

• queue_conditions (checked on the PR): check, the changeset-intent check (success or skipped), containerised release pipeline, sandbox proofs, tarballs rebuild bit-for-bit.
• merge_conditions (checked on Mergify's queue draft PR): the same checks except the intent check.
• Squash merge, PR title and body as the commit, per org defaults.
• Validated against Mergify's published JSON schema (valid). Mergify's own configuration check on this PR is the authoritative check; extends: .github resolves only once the shared repo exists and the Mergify App has access to both repos.
• No changeset needed: no publishable package changes. Commit carries no AI co-author trailer because this repo's commitlint bans it.

Do not merge until the org prerequisites (shared .github config, Mergify repo access, merge lock ruleset) are in place.

🤖 Generated with Claude Code

[kiro-systemf]

Reviewed the diff: .mergify.yml adds the queue rule extending the organisation policy. Every condition names a check that exists on this repository's PRs — check, check / a publishable-package change needs an intent, containerised release pipeline, sandbox proofs, tarballs rebuild bit-for-bit — and all five pass at this head. Queue conditions gate on the full set; merge conditions keep the four build checks, so the intent check stays PR-level. Approved.

Read the .mergify.yml diff and verified every named check exists on this repository's current PRs, and that all five checks pass at the head.

[kiro-systemf]

Dependency note: extends: .github resolves to the org-wide policy, which is still an open PR on systemfsoftware/.github main. This file becomes effective once that policy lands; do not merge before it.

[kiro-systemf]

Reviewed by the lead session (not the author): .mergify.yml extends .github; every check named in queue/merge conditions exists in this repo's recent check runs; dependabot.yml (where present) parses and limits auto groups to minor/patch; no private terms in a public repo.