🛰️ CI Sentinel Analyze Loop — Three-Bug Repair

Issue #1862 — toggle the bugs to see how each one hid the others. 3 PRs queued for analysis: #1854, #1853, #1852.

▶ Run with selected bugs


  
▶ Run with all three fixes






  
Bug A — 2> err.log captures nothing
    
claude -p returns auth/permission errors as JSON on STDOUT → verdict.json.
err.log stays empty, so `cat err.log` in the || block shows nothing.
Fix: log BOTH verdict.json and err.log on failure.

  
Bug B — errexit kills the loop before continue
    
GHA default shell is bash -e. `cat err.log` on an empty file exits non-zero,
killing the entire step BEFORE `continue` fires — PRs 2 and 3 never analyzed.
Fix: guard every diagnostic cat with `|| true`.

  
Bug C — dontAsk silently refuses tools
    
/ci-debug needs Bash for `gh pr checks` + `gh api .../logs`. dontAsk refuses
permission-requiring tools → empty verdict, no error.
Fix: --permission-mode acceptEdits (read-only skill, headless-safe).