feat(governance): automate harness consistency checks (phase 3)

.gitea/ISSUE_TEMPLATE/task.md

@@ -32,5 +32,5 @@ labels:
 - claimed_by: `【领取后填写非敏感 agent-id】`
 - lease_until: `【领取后填写 RFC 3339 时间】`
 
-领取必须遵循 `docs/gitea-collaboration.md` 的原子 claim 流程。不要在本 Issue 粘贴 Token、Authorization header 或私有配置。
+领取必须遵循 `docs/gitea-collaboration.md` 的 dispatcher 串行分配与 claim 标记流程。不要在本 Issue 粘贴 Token、Authorization header 或私有配置。
 创建后先把 Issue 编号回填任务文件并合入默认分支，再按主要变更选择唯一 `type/docs` 或 `type/code`、一个 `priority/*` 和 `status/todo`。映射提交完成前不可领取。

.gitea/workflows/harness-governance.yml

@@ -0,0 +1,21 @@
+name: Harness governance
+
+on:
+  push:
+  pull_request:
+
+permissions: read-all
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - name: Validate templates and governance
+        run: |
+          python scripts/validate_agent_context.py
+          python -m unittest discover -s tests -p "test_*.py"
+          python scripts/validate_harness_governance.py