- Grant forgejo_add_issue_labels permission to automation-tracking-manager
- Remove overly restrictive bash endpoint blocking that prevented adding labels to issues
- This is a targeted exception for a trusted system component that only adds the 'Automation Tracking' label
- All other agents remain restricted and must use forgejo-label-manager
This fixes the issue where automation tracking tickets were not getting their labels.