(standardize-repo): Report Renovate health and apply the release's toolchain floors per repo #1689

Problem

Dependency updates stay out of a standardize run for scope: a dependency bump inside a template-application PR makes the review scope impossible to state. Two things belong in the run because the template dictates them. First, the toolchain floors a release requires (pnpm major, Node, copier, task, the devcontainer tool pins) are part of the template update and land in the same PR, and nothing else dependency-shaped does. Second, a Renovate-health row in the reconcile report: the Dependency Dashboard issue exists (its absence means Renovate is inert; sommerlawn-zoho had none on 2026-10-26) and the rendered renovate.json matches the template render (harmon-devkit#1677). Everything else about dependency maintenance changes under harmon-init#1345, separately from this run.

Surface

ai/skills/repo/standardize-repo/assets/ (guarded update asset, report renderer), the classified item list shared with harmon-init.

Acceptance criteria

• [CI] The guarded update's discover step lists the toolchain floors the target release raises for the repo, apply includes them in the update PR, and the PR body's review scope names them.
• [CI] The reconcile report has a Renovate-health row per repo: dashboard issue present or absent, renovate.json matches the template render or drifts, and the class (human-only when the dashboard is absent, agent-apply when only the render drifts).
• [CI] A test proves that an open Renovate PR or an outdated lockfile entry never changes the update PR's diff.

Verify

Re-read the ADR and spec named under Provenance for the current design, and re-establish every path, task name or observation above with git grep in the target checkout (and gh for GitHub state) before acting; a renamed path means the claim needs re-checking, not that the problem is gone.

Out of scope

Merging Renovate PRs, fleet-wide dependency runs, and the Renovate preset or grouping work under harmon-init#1345.

Provenance

Filed from the 2026-10-26 standardize-repo redesign session (harmon-devkit, worktree/clear-river-0602). Design record: harmon-devkit ADR docs/decisions/2026-10-26-fleet-standardization-runs.md and spec specs/standardize-repo-fleet.md.