fix(agents): add missing forgejo_add_issue_labels deny and fix YAML bug

- pr-editor.md: added missing forgejo_add_issue_labels: deny
- pr-manager.md: added missing forgejo_add_issue_labels: deny
- pr-merge-pool-supervisor.md: added missing forgejo_add_issue_labels: deny
- async-agent-manager.md: added missing forgejo_add_issue_labels: deny
- forgejo-signature-appender.md: fixed broken YAML (permission: {} -> permission:), added missing forgejo_add_issue_labels: deny

.opencode/agents/async-agent-manager.md

@@ -30,6 +30,7 @@ permission:
     "forgejo_create_label": deny
     "forgejo_create_org_label": deny
     "forgejo_create_repo_label": deny
+    "forgejo_add_issue_labels": deny
   task:
     "*": deny
 ---

.opencode/agents/forgejo-signature-appender.md

@@ -8,13 +8,14 @@ hidden: true
 temperature: 0.1
 model: openai/gpt-5-codex
 color: "#6B7280"
-permission: {}
+permission:
   forgejo:
     "*": allow
     # CRITICAL: Label creation is COMPLETELY FORBIDDEN
     "forgejo_create_label": deny
     "forgejo_create_org_label": deny
     "forgejo_create_repo_label": deny
+    "forgejo_add_issue_labels": deny
 ---
 
 # CleverAgents Forgejo Signature Appender

.opencode/agents/pr-editor.md

@@ -26,6 +26,7 @@ permission:
     "forgejo_create_label": deny
     "forgejo_create_org_label": deny
     "forgejo_create_repo_label": deny
+    "forgejo_add_issue_labels": deny
 ---
 
 # PR Editor

.opencode/agents/pr-manager.md

@@ -32,6 +32,7 @@ permission:
     "forgejo_create_label": deny
     "forgejo_create_org_label": deny
     "forgejo_create_repo_label": deny
+    "forgejo_add_issue_labels": deny
 ---
 
 # PR Manager

.opencode/agents/pr-merge-pool-supervisor.md

@@ -33,6 +33,7 @@ permission:
     "forgejo_create_label": deny
     "forgejo_create_org_label": deny
     "forgejo_create_repo_label": deny
+    "forgejo_add_issue_labels": deny
 ---
 
 # PR Merge Pool Supervisor