Automate remaining audits & checks to reach 100% completion (CI + AI coders + audit workflows)

[spiralgang]

This PR introduces automation infrastructure and actionable audit tools toward 100% project completion from the current ~83% status.

---

What's included:

• Adds .github/workflows/auto-audit-and-plan.yml CI workflow: runs on push to autofix/complete-project-automation, generates diagnostics, produces/attaches audit checklists.
• Adds scripts/auto/generate_plan.py: Python CLI script that audits Docker config, Android rules, code-server, secrets, security, CI/CD, and test coverage. Generates /reference/vault/checklist.json.
• Adds scripts/auto/apply_patch.sh: Helper for developers to safely apply code, Docker, or Compose patches locally or in CI.
• Adds /reference/vault/audit-action-plan.md: Traceable, prioritized action items mapped to files, linked to vault docs and standards.
• Adds docs/PR_NOTES.md: Reviewer instructions and end-to-end verification steps, requirements to reach 100% complete.

---

Usage & Verification:

• On any push to this branch, audit CI/workflows run and generate diagnostic artifacts.
• Reviewers: See PR_NOTES.md and audit-action-plan.md.
• Confirm no secrets/auth keys/model weights are committed. Configure secrets only in GitHub Settings.
• CI, SAST, CodeQL, linter/test pipelines all verified before merge.

---

References:

• Issue PULL REQUEST FIXES #50 assessment for list of remaining tasks
• Per-repo best practices, mobile/Docker/AI/security references in /reference/vault
• All linked external standards in audit-action-plan.md

---

Vault reference: /reference/vault/ contains all policy and standards documents.

Note: No privileged secrets or credentials are included/committed. All code matches the vault standards, and every automation step is traceable and auditable via the attached plan in the PR.

---