feat(web): add a hide-forks option to the repository picker

[iscekic]

What changed

• The repository picker shows a Hide forks checkbox when the account has at least one forked repository.
• When the checkbox is on, the picker hides forked repositories from the list.
• The checkbox state persists per browser under the repo-picker:hide-forks local-storage key.
• Select All and Deselect All act on the listed repositories only. They keep selections that the fork filter hides.
• The counter reports the listed selection, and adds N forks hidden when the filter is on.
• The GitHub repository fetch carries the fork flag through to the picker for Code Reviewer, Security Agent, Auto Triage, and Auto Fix.
• A cached repository list that predates the fork flag triggers one refetch, so the flag backfills without a migration.

Why

Issue #4498 asks for a way to hide forked repositories when a user selects repositories to watch. An account with many forks makes the picker hard to read. The GitHub API already returns the fork flag, but the picker's data path dropped it.

Verification

• Driver checks: per-slice checks passed.
• Section e2e backend passed: no changed service.

Notes for the reviewer

• fork is optional on the repository types. A repository cached before this change reports fork: undefined and stays listed until the backfill refetch replaces it.
• The selection helpers are pure functions in repository-multi-select-selection.ts and have unit tests.

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Executive Summary

Incremental fixture update adds fork: false to Security Agent getRepositories tests so they match the handler mapping; no issues, high confidence.

Files Reviewed (1 file)

• apps/web/src/lib/security-agent/router/shared-handlers.test.ts

Previous Review Summary (commit 5118316)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 5118316)

Status: No Issues Found | Recommendation: Merge

Executive Summary

Hide-forks picker plumbing and one-time fork backfill look correct across all 14 changed files, with high confidence.

Files Reviewed (14 files)

• apps/web/src/components/auto-fix/AutoFixConfigForm.tsx
• apps/web/src/components/auto-triage/AutoTriageConfigForm.tsx
• apps/web/src/components/code-reviews/RepositoryMultiSelect.tsx
• apps/web/src/components/code-reviews/repository-multi-select-selection.test.ts
• apps/web/src/components/code-reviews/repository-multi-select-selection.ts
• apps/web/src/components/security-agent/security-config-types.ts
• apps/web/src/lib/auto-triage/application/routers/shared-router-factory.ts
• apps/web/src/lib/cloud-agent/github-integration-helpers.test.ts
• apps/web/src/lib/cloud-agent/github-integration-helpers.ts
• apps/web/src/lib/code-reviews/core/selectable-repositories.ts
• apps/web/src/lib/integrations/core/types.ts
• apps/web/src/lib/integrations/platforms/github/adapter.ts
• apps/web/src/lib/security-agent/router/shared-handlers.ts
• packages/db/src/schema-types.ts

---

_{Reviewed by grok-4.6 · Input: 73.7K · Output: 5.3K · Cached: 142.5K}

_{Review guidance: REVIEW.md from base branch main}

[iscekic]

Opened as part of an internal workflow test, if useful, please take over.