fix: carry pr draft status into remediation approval

[svozza]

The /fix workflow handles issue_comment events, which contain no PR draft status. Its approval assertion therefore treats even trusted authors’ non-draft PRs as drafts and refuses fixes in repositories without required environment reviewers.

Resolve draft status from the PR API during command preparation and pass it to both job routing and the in-job approval assertion. Only literal API false permits a trusted author to bypass approval; draft, missing, and malformed values still require it.

Validation: regression coverage combines author trust with draft states and checks the workflow wiring. GitHub CI passes the full deterministic suite and type checking. Locally, 2,304 tests passed and 2 skipped; four socket-server tests blocked by the sandbox passed on a rerun of all 45 GitHub API tests outside the sandbox. Workflow lint passes with only the installed actionlint version’s missing support for the existing job.workflow_sha and job.workflow_repository fields excluded.