fix: include Janeway Labs in ruleset sync

[jr200]

Summary

• add janeway-labs to canonical trunk-protect ruleset targets
• allow scripts/apply-rulesets.sh to target janeway-labs
• document the translatepane onboarding command and GitHub private-repo plan limitation
• correct ruleset docs to match the current trunk-protect JSON

Validation

• bash -n scripts/apply-rulesets.sh
• yq e '.' rulesets/targets.yaml >/dev/null
• scripts/apply-rulesets.sh --dry-run --org janeway-labs --repo janeway-labs/translatepane --ruleset trunk-protect currently reaches GitHub and fails with the expected plan limitation: private repo branch protection/rulesets require GitHub Pro/Team or public repo visibility

Linear

• Updated JWL-6 with the missing org setup step and the private repo protection caveat