fix(review): avoid a UI typecheck regression from a new agent-actions import

focus-manifest.ts is part of the UI package's typechecked closure (its
transitive deps get walked by apps/gittensory-ui's own tsc run). Importing
MAX_REVIEW_NAG_COOLDOWN_DAYS from settings/agent-actions.ts pulled that
module's own import of github/commands.ts -> utils/crypto.ts into the UI
build for the first time, exposing a pre-existing latent
Uint8Array<ArrayBufferLike>/BufferSource type mismatch in crypto.ts that
the UI's tsc had never previously reached.

Duplicates the small constant locally in focus-manifest.ts instead of
importing it, keeping db/repositories.ts's own import from agent-actions.ts
(never part of the UI closure) unaffected. Also rebases the branch's merge
commit into a linear rebase onto current main.

Author: JSONbored

src/signals/focus-manifest.ts

@@ -4,7 +4,6 @@ import { normalizeAutonomyPolicy, normalizeAutoMaintainPolicy } from "../setting
 import { normalizeCommandAuthorizationPolicy } from "../settings/command-authorization";
 import { mergeContributorBlacklists, normalizeContributorBlacklist } from "../settings/contributor-blacklist";
 import { normalizeAutoCloseExemptLogins } from "../settings/auto-close-exempt";
-import { MAX_REVIEW_NAG_COOLDOWN_DAYS } from "../settings/agent-actions";
 import { hasUnsafeWildcardCount } from "./change-guardrail";
 import { PUBLIC_LOCAL_PATH_INLINE } from "./redaction";
 
@@ -742,6 +741,13 @@ function normalizeOptionalString(value: JsonValue | undefined, field: string, wa
   return null;
 }
 
+// Keep the review-nag lookback operationally bounded so repo-controlled config cannot overflow Date
+// arithmetic. Duplicated from settings/agent-actions.ts's own MAX_REVIEW_NAG_COOLDOWN_DAYS (same value,
+// same rationale) rather than imported: this module is part of the UI package's typechecked closure, and
+// agent-actions.ts transitively imports github/commands.ts -> utils/crypto.ts, pulling a heavier
+// GitHub-App-specific dependency chain into the UI build for one small constant.
+const MAX_REVIEW_NAG_COOLDOWN_DAYS = 365;
+
 /**
  * Parse the optional `settings:` mapping — a partial repository-settings override. Only recognized
  * fields are kept; unknown/invalid values are dropped with a warning and never throw.