-- Add auto_repair_mode to per-repo automation settings.
-- Default 'suggest' = runs but never auto-commits (current behavior preserved).
-- Owners can set to 'off' to fully disable the bot from touching their branch.
ALTER TABLE repo_automation_settings
  ADD COLUMN IF NOT EXISTS auto_repair_mode TEXT NOT NULL DEFAULT 'suggest';