Activate the verified daily repository and admin-team audits #411

🤖 Generated by the Agentic Engineer

The routine read-only workflow is merged and its actual enabled, disabled and standalone coverage main controls pass in #409. Enable its daily repository/admin audit through reviewed policy so later gaps receive the existing issue-on-gap report.

Acceptance:

• Enable the scheduled flag after the real main controls are verified, while preserving manual opt-out and all credential/source/reporting controls.
• Keep organization-settings scheduling separate in Model org-wide GitHub settings (webCommitSignoffRequired, default permission, 2FA) once the provider supports it #85/Roll out and retire the organization-settings audit opt-in #404.
• Run the existing both-state admission and boundary checks; verify the merged policy is enabled.
• Leave the first natural scheduled-run observation and flag retirement in Audit live repository admin-team parity before maintenance retirement #395; leave maintenance retirement in Migrate governance intent from devantler-tech/maintenance into .github (declarative) and retire the maintenance repo #84.

Part of #395. Rough size: S. Priority: P2. This changes read-only monitoring admission, not settings, grants or an archive/deletion.