feat(ralph): implement AFK Ralph pattern with Docker sandbox and YOLO mode

[iamladi]

Summary

Implements the full Matt Pocock AFK Ralph pattern across all three workflow orchestration scripts for true autonomous operation.

Changes

• Docker sandbox mode (USE_SANDBOX=true default) - Runs Claude in isolated Docker container for AFK safety
• YOLO mode (YOLO_MODE=true default) - Uses --dangerously-skip-permissions to skip prompts
• Unified run_claude() function - Consistent Claude invocation with jq streaming + output capture
• Trap handlers - Cleanup on EXIT/SIGINT/SIGTERM (removes temp files, stops sandbox)
• Signal detection - Replaced custom <phase> XML with standard <promise>COMPLETE|FAILED</promise> pattern
• For-loop refactors - Cleaner iteration with explicit limits
• Environment propagation - Parent script passes USE_SANDBOX/YOLO_MODE to child scripts

Files Changed

• scripts/workflow-ralph.sh - Main orchestrator
• scripts/ci-ralph.sh - CI failure resolution loop
• scripts/comments-ralph.sh - PR comment resolution loop

Usage

# Full AFK mode (Docker + YOLO) - default
./workflow-ralph.sh research/my-feature.md

# No sandbox (faster, less safe)
USE_SANDBOX=false ./workflow-ralph.sh research/my-feature.md

# Interactive mode (keep permission prompts)
YOLO_MODE=false ./workflow-ralph.sh research/my-feature.md

Test Plan

• Verify bash syntax: bash -n scripts/*.sh
• Test run_claude() function with simple prompt
• Test Docker sandbox invocation: docker sandbox run --credentials host claude --version
• Run full workflow with test research file