33c076aaa0
POLICIES.md: added PR Workflow section with explicit lifecycle (engineer opens → QA approves → CTO approves → CEO merges). Updated issue tracking to reference dual approval before merge. Added branch protection enforcement directive. CEO: added merge step to heartbeat, merge authority in SOUL.md, branch protection enforcement responsibility. CTO: removed merge authority, review and approve only. Co-Authored-By: Paperclip <noreply@paperclip.ing>