Merge branch 'develop' into feature/GHO-112-update-create-github-app-token-v3

Author: noahwhite

.github/workflows/claude-review.yml

@@ -0,0 +1,22 @@
+name: Claude Code Review
+
+on:
+  issue_comment:
+    types: [created]
+
+jobs:
+  review:
+    if: |
+      github.event.issue.pull_request != null &&
+      contains(github.event.comment.body, '@claude') &&
+      github.event.comment.user.login == 'noahwhite'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+
+    steps:
+      - uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

CLAUDE.md

@@ -35,6 +35,8 @@ git push origin feature/GHO-XXX-branch-name
 
 **Never use** `mcp__github__push_files` or `mcp__github__create_or_update_file` for commits in this repo — they bypass local git config, produce unsigned commits, and fail with `422/409 Repository rule violations found: Commits must have verified signatures`.
 
+**Never use `git stash` to carry changes across branches.** Auto-merge during `git stash pop` silently drops hunks when branches have diverged, causing changes to disappear without error. Instead, use a temp commit on the current branch, then cherry-pick or reset after switching, or use `git diff > patch.diff` / `git apply patch.diff`.
+
 After pushing, open the PR with `mcp__github__create_pull_request`.
 
 ### PR Creation Checklist

opentofu/modules/vultr/instance/userdata/ghost-compose/compose.yml.tftpl

@@ -10,7 +10,7 @@
 #
 services:
   caddy:
-    image: caddy:2.11.2-alpine@sha256:fce4f15aad23222c0ac78a1220adf63bae7b94355d5ea28eee53910624acedfa
+    image: caddy:2.10.2-alpine@sha256:953131cfea8e12bfe1c631a36308e9660e4389f0c3dfb3be957044d3ac92d446
     restart: always
     entrypoint: ["/caddy-entrypoint.sh"]
     ports: