feat(org-workspace): add org-workspace feature

[baxyz]

Summary

• New org-workspace feature: clones every repo of a GitHub org into sibling /workspaces folders (persisted across rebuilds via a ${devcontainerId}-scoped named volume, not a host bind-mount) and generates or merges a multi-root .code-workspace file at the bootstrap repo's own root.
• org auto-detects from the bootstrap repo's own origin remote via gh repo view when left empty; repos (explicit list) takes precedence over autoDiscover (a comma-separated token list: public/private/internal/fork/archived, or the shorthand true/false).
• Never touches anything already present at a sibling path (existing bind-mount, manual clone, prior run) — clone/link is additive only.
• .code-workspace generation merges into an existing file's folders array (deduplicated) rather than overwriting it, leaving settings/extensions/launch/etc. untouched.
• Depends on helpers4-common (for h4_ensure_volume_writable) and github-dev (for an authenticated gh CLI) via dependsOn.
• Wired into scopes.json, both CI matrices (pr-validation.yml, test.yml), and the AGENTS.md features table.

Test plan

• jq empty src/org-workspace/devcontainer-feature.json
• bash -n clean on install.sh and test/org-workspace/test.sh
• devcontainer features test --features org-workspace --base-image mcr.microsoft.com/devcontainers/base:debian . — image builds, options resolve correctly, install.sh runs and installs clone-repos.sh (container launch itself hit an unrelated sandbox-local Docker bind-mount quirk, not exercised by CI)
• Generated clone-repos.sh logic manually exercised end-to-end against the real helpers4 GitHub org (fresh clone, idempotent re-run, already-present skip, .code-workspace merge preserving unrelated keys, all autoDiscover token combinations, dotfile-named repos like .dev/.github)
• CI (pr-validation.yml) green

🤖 Generated with Claude Code

[github-actions]

✅ PR Validation Passed

All checks passed!

---

📋 Pipeline Status

	Job	Status
✅	🧾 Conventional Commits	passing
✅	🔖 Version Bump	passing
✅	🧪 Feature Tests	passing
✅	🐚 ShellCheck	passing

---

_{🤖 Generated by @helpers4 CI • 2026-09-08}