fix(deps): close superseded strategy pin PRs

[Pigbibi]

Summary

• Close only older generated strategy QPK pin PRs after the current matching PR is fully green and queued.
• Require trusted generated metadata and prove the old QPK pin is an ancestor of the current QPK pin before closure.
• Exclude manual PRs, unknown branches, consumers, and runtime repositories.

Validation

• Manually invoked rollout and cleanup guard test cases because pytest is unavailable on this VPS.
• Ran Python syntax checks and git diff --check.

No runtime target, deployment, or trading configuration is changed.