[b1zya]

Unblocks the open roll PRs (#19, and #17 which it supersedes).

Flaky integration tests on a cold runner

The three red CI runs on the roll branches (41455020026, 42034887367, and the macOS cancel in 42222491837 aside) all failed in tests/integration/config.spec.ts, the first tests to launch Chrome:

• the first open spent 40-58 s before the daemon was listening (green runs: 2-26 s), so the daemon sees our merged config… hit the 60 s test timeout;
• on Linux the chrome --version probe hit its 10 s limit, so --config points at… got headless-user-agent-unknown (leak) instead of the headless-user-agent note.

Nothing in the roll caused it: the runner reads the preinstalled Chrome from a cold disk on first launch. CI now pays that once in a Warm up Chrome step (open about:blank + close in a throwaway state dir, 5 min limit, non-fatal) before test:integration. Job names are unchanged, so the ruleset's required checks still match.

Roll workflow

• After creating or updating its PR, upstream-roll.yml closes older open roll_* PRs (Superseded by #N, branch deleted). A manual run for an older version leaves newer rolls alone (sort -V).
• The "could not merge" comment now names the real blocker: the pull_request CI run held in action_required for a push by the workflow token, which is the only run the ruleset counts. .claude/skills/dev/roll.md says the same.

Checked

• npm run check, npm run test:unit (129 passed); the warm-up commands run locally; the superseding loop dry-run against the open PRs closes only roll_1.64.2.

🤖 Generated with Claude Code