Enable Code Quality before enforcing its org-wide merge gate #168

🤖 Generated by the Agentic Engineer

Problem

The active organization ruleset Require code quality results (16885082) targets every default branch at severity all, but at least one targeted repository does not produce the required GitHub Code Quality result.

Live reproduction: wedding-app#277 at signed head bcdd7bb6c684d3c58ba255b10cf9dcbdcf1d6476 has green required CI, E2E, build, boot smoke, Lighthouse, dependency review, CodeQL, workflow security, and current-head CodeRabbit review; GitHub reports mergeable=MERGEABLE but mergeStateStatus=BLOCKED. No CodeQL - Code Quality check/result exists. The repository's ordinary CodeQL default setup is configured, which is a separate surface and does not establish that GitHub Code Quality is enabled.

GitHub's rollout procedure says to confirm the CodeQL - Code Quality check ran successfully before activating this threshold: https://docs.github.com/en/code-security/how-tos/maintain-quality-code/set-pr-thresholds

The organization-admin bypass exists, but using it here would hide the missing deployment fact and make the active quality rule decorative for automation.

Acceptance

• Determine live GitHub Code Quality enablement for every repository targeted by ruleset 16885082; preserve unresolved repositories as unknown.
• Either enable Code Quality on the intended targets after its activation/billing facts are settled, or narrow/evaluate the rule so it does not actively block repositories that cannot emit a result.
• On a representative affected PR, observe a successful CodeQL - Code Quality result and mergeStateStatus=CLEAN without an admin bypass.
• Unblock wedding-app#277 and complete actions#997's live signed-template-sync verification.
• Keep declarative adoption tracked by parent Adopt supported GitHub rulesets and track remaining provider gaps #69 while provider support for rule type code_quality remains absent.

Part of #69.