feat(cli): add --resolve-after-misses flag to sentinel run

Lets an operator tune how many consecutive absent runs before an issue
auto-resolves (default 3). Verified the full live loop end to end against a
real repo: file, dedup, suppress, and auto-resolve all behave.

Author: will-lamerton

pnpm-workspace.yaml

@@ -22,4 +22,4 @@ onlyBuiltDependencies:
   - '@biomejs/biome'
   - esbuild
 
-auditConfig: { ignoreGhsas: null }
+auditConfig: {}

source/cli.ts

@@ -273,6 +273,9 @@ async function runRun(argv: string[]): Promise<number> {
 			configDir: resolve(flagStr(flags, 'config-dir') ?? dirname(configPath)),
 			configRepo:
 				flagStr(flags, 'config-repo') ?? process.env.GITHUB_REPOSITORY,
+			resolveAfterMisses: flagStr(flags, 'resolve-after-misses')
+				? Number(flagStr(flags, 'resolve-after-misses'))
+				: undefined,
 			dryRun,
 		},
 	);