fix(server): merged PRs update and auto-settle threads again

[Bil0000]

Problem

On the new orchestrator, a thread's linked PR can stay "open" in the sidebar after it is merged or closed. Because of this, auto-settle never settles the thread.

The branch reads project shells through ProjectEnrichmentService.getAvailable. That call only checks a cache: on a miss, it returns repositoryIdentity: null and fills the cache in the background. The cache keeps a result for 1 minute, and PullRequestSyncReactor also runs every minute. So the sweep often reads a project with no identity. Then PullRequestService.requireProject finds no supported host and fails with PullRequestUnavailableError: Change requests cannot be browsed for this project's host yet. The link snapshot stays open, and resolveAutoSettlementAt does not settle a thread while any of its links is open.

On a live install, the traces show 143 failed and 11 successful canonicalRef calls across 3 log files. The "pull request sync skipped" warning does not log the cause, so the failure was hard to see. main does not have this bug, because its project shell reads resolve the identity with RepositoryIdentityResolver and wait for the answer.

Fix

In PullRequestService.listWorkspaceProjects, if a project shell has no cached identity, resolve it with RepositoryIdentityResolver before routing. A shell that already has an identity costs nothing extra. For a missing one, the resolver's own cache (1 minute) is used, so this is the same lookup that main does on every read. Only the PR service changes. The sidebar and other callers that read enrichment still get the non-blocking cached path.

Verification

• New test: a project shell with repositoryIdentity: null still routes a summary read. It fails before the fix with the error above, and passes after it.
• vp test run src/pullRequest/ src/git/ src/orchestration/PullRequestSyncReactor* src/orchestration-v2/RunFinalizationService.test.ts: 28 files, 967 tests pass.
• tsc --noEmit for apps/server, plus vp lint and vp fmt --check on the touched files: clean.

Risk

A PR read for a project that is not a git repository now runs one resolver lookup. This lookup is cached. For a path with no git root, the root is not cached and git runs again on the next read, the same as main.

Made by Claude Opus 5.5 in Claude Code.

[macroscopeapp]

Approvability

Verdict: Approved at cdbe11f

Macroscope's review found this PR approvable — This is a focused server bug fix that restores repository identity resolution for existing pull-request operations, with bounded concurrency and regression coverage. It introduces no schema, deployment, security, billing, authentication, default, or static-analysis changes.

^{You can add or adjust custom eligibility rules. Learn more.}