Merge branch 'worktree/ci-native-windows-20260808' into worktree/ci-native-windows-coverage-20260808

# Conflicts:
#	packages/subagent/subagent-codex/README.i18n.yaml
#	packages/subagent/subagent-codex/README.md
#	packages/subagent/subagent-codex/README.zh.md

.github/issue-management/policy.mjs

@@ -20,7 +20,7 @@ const PR_KINDS = new Set([
   'kind/cleanup',
   'kind/dependency',
 ])
-// Aliases removed by the unified taxonomy migration remain reserved so they cannot be recreated.
+// Retired label aliases stay reserved so they cannot be recreated.
 const LEGACY_LABELS = new Set([
   'kind/bug',
   'kind/documentation',

.github/workflows/ci.yml

@@ -877,10 +877,9 @@ jobs:
   all-checks-passed:
     name: all checks passed
     # This bookkeeping-only verdict must not depend on custom-pool
-    # provisioning (master's #734 moved it to ubuntu-latest) — and under
-    # failover it follows the same selector as the worker jobs it
-    # aggregates, so a standard-hosted outage cannot strand the
-    # branch-protection verdict either (observed 2026-07-27).
+    # provisioning — and under failover it follows the same selector as the
+    # worker jobs it aggregates, so a standard-hosted outage cannot strand
+    # the branch-protection verdict either.
     runs-on: >-
       ${{ vars.DSH_CI_FAILOVER == 'selfhosted'
           && github.event.pull_request.user.login != 'dependabot[bot]'