feat: dark factory — autonomous CI/CD agents for harb

Three agents extracted from ~/scripts/harb-{dev,review}/:

- dev/ — pull-based dev agent (find ready issues → implement → PR → merge)
- review/ — AI code review (structured verdicts, follow-up issues)
- factory/ — supervisor (bash health checks, auto-fix, escalation)

All secrets externalized to .env (see .env.example).
Shared env/helpers in lib/env.sh.

.env.example

@@ -0,0 +1,31 @@
+# Dark Factory — Environment Configuration
+# Copy to .env and fill in your values.
+# NEVER commit .env to the repo.
+
+# Codeberg API token (read from ~/.netrc by default, override here if needed)
+# CODEBERG_TOKEN=
+
+# Codeberg review bot token (separate account for formal reviews)
+REVIEW_BOT_TOKEN=
+
+# Woodpecker CI API token
+WOODPECKER_TOKEN=
+
+# Woodpecker CI server URL
+WOODPECKER_SERVER=http://localhost:8000
+
+# Woodpecker Postgres (for direct DB queries)
+WOODPECKER_DB_PASSWORD=
+WOODPECKER_DB_USER=woodpecker
+WOODPECKER_DB_HOST=127.0.0.1
+WOODPECKER_DB_NAME=woodpecker
+
+# Target Codeberg repo
+CODEBERG_REPO=johba/harb
+CODEBERG_API=https://codeberg.org/api/v1/repos/johba/harb
+
+# Harb repo local path
+HARB_REPO_ROOT=/home/debian/harb
+
+# Claude CLI timeout (seconds)
+CLAUDE_TIMEOUT=7200