Fix managed restart custody and readiness adoption - #292

Complete .github/PULL_REQUEST_TEMPLATE.md in the PR description: missing sections: Outcome, Work authority, Plan, Changes and commits, Verification, Risk and rollback, Completion summary, Submission checklist; missing work-authority values: Work item / Issue, Proposal / decision, Assignment / checkpoint, Actor, Human authority, Agent / capacity provider, Exact base ref, Exact head ref; select exactly one contributor mode; Exact base ref must contain a full 40-character commit SHA; Exact head ref must contain a full 40-character commit SHA; ready PR has incomplete checklist items: The change is bounded to the stated work item and target repository. | Exact base and head refs are recorded and the branch is ready for review. | Verification and compatibility evidence are recorded above. | No plaintext secrets, credentials, machine state, or unrelated residue are included. | Plan, status, commits, and completion summary form a complete durable record. | Rollback or recovery steps are documented and executable.

On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/