v1.23.0.0 feat: always prefix PR titles with v<VERSION> (#1284)

* feat: add bin/gstack-pr-title-rewrite.sh shared helper

Single source of truth for "rewrite a PR title to start with v<VERSION>".
Three cases: already correct (no-op), different prefix (replace), no prefix
(prepend). Rejects malformed VERSION (anything outside ^[0-9]+(\.[0-9]+)*$)
with exit code 2. Uses literal case prefix match instead of bash's pattern-
matching # operator so a VERSION with glob metacharacters cannot mismatch.

Free bun test covers the four branches plus malformed-input rejection,
plain-words-not-stripped, single-segment-not-stripped, idempotence, and
missing-args. 9 tests, ~400ms.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat(skills): /ship and /document-release always prefix PR titles with v<VERSION>

ship/SKILL.md.tmpl Step 19: idempotency block now always rewrites titles
to start with v$NEW_VERSION via the new helper. Removes the "custom title
kept intentionally" loophole that let unprefixed titles persist forever.
Adds a post-edit self-check that re-fetches the title and retries once if
the edit didn't stick. Inline comments on the create-PR snippets at lines
867 and 876 make the rule unmissable.

document-release/SKILL.md.tmpl Step 9: new "PR/MR title sync" sub-step
calls the same helper after the body update. Catches the case where Step 8
bumped VERSION after /ship had already created the PR — title now follows
VERSION instead of going stale.

Golden fixtures regenerated for claude/codex/factory ship variants.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat(ci): pr-title-sync rewrites titles unconditionally

Drops the "eligible only if already prefixed" gate. Sources the new shared
helper, rewrites unconditionally on every VERSION change. Defense-in-depth
backstop for PRs opened outside the skills (manual gh pr create, web UI).

Uses env: for OLD_TITLE so YAML expression injection cannot reach run:.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* chore: bump version and changelog (v1.23.0.0)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

.github/workflows/pr-title-sync.yml

@@ -25,40 +25,19 @@ jobs:
           fetch-depth: 1
           ref: ${{ github.event.pull_request.head.sha }}
 
-      - name: Read VERSION + current title
-        id: inspect
-        run: |
-          set -euo pipefail
-          VERSION=$(cat VERSION | tr -d '[:space:]')
-          TITLE=$(jq -r '.pull_request.title' "$GITHUB_EVENT_PATH")
-          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
-          # Only rewrite titles that ALREADY follow the v<X.Y.Z.W> prefix pattern.
-          # Custom titles (no prefix) are left alone — user kept them intentionally.
-          if printf '%s' "$TITLE" | grep -qE '^v[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+ '; then
-            PREFIX=$(printf '%s' "$TITLE" | awk '{print $1}')
-            REST=$(printf '%s' "$TITLE" | sed 's/^v[0-9][0-9.]* //')
-            {
-              echo "prefix=$PREFIX"
-              echo "rest=$REST"
-              echo "eligible=true"
-            } >> "$GITHUB_OUTPUT"
-          else
-            echo "eligible=false" >> "$GITHUB_OUTPUT"
-          fi
-
-      - name: Rewrite title if version changed
-        if: steps.inspect.outputs.eligible == 'true'
+      - name: Rewrite PR title to match VERSION
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PR_NUM: ${{ github.event.pull_request.number }}
-          NEW_V: ${{ steps.inspect.outputs.version }}
-          OLD_PREFIX: ${{ steps.inspect.outputs.prefix }}
-          REST: ${{ steps.inspect.outputs.rest }}
+          OLD_TITLE: ${{ github.event.pull_request.title }}
         run: |
-          if [ "v$NEW_V" = "$OLD_PREFIX" ]; then
-            echo "Title already matches v$NEW_V; no change."
+          set -euo pipefail
+          chmod +x ./bin/gstack-pr-title-rewrite.sh
+          VERSION=$(cat VERSION | tr -d '[:space:]')
+          NEW_TITLE=$(./bin/gstack-pr-title-rewrite.sh "$VERSION" "$OLD_TITLE")
+          if [ "$NEW_TITLE" = "$OLD_TITLE" ]; then
+            echo "Title already correct; no change."
             exit 0
           fi
-          NEW_TITLE="v$NEW_V $REST"
-          echo "Rewriting: $OLD_PREFIX ... → v$NEW_V ..."
+          echo "Rewriting: $OLD_TITLE -> $NEW_TITLE"
           gh pr edit "$PR_NUM" --title "$NEW_TITLE"