Suppress wildcard fetch warning for public repos

[Copilot]

The push-to-pull-request-branch: target: "*" wildcard fetch warning is irrelevant for public repos — all PR branches are always accessible without special fetch configuration in OSS repos.

Changes

• computeIsPublicRepo() — new method on *Compiler in push_to_pull_request_branch_validation.go that queries gh api /repos/{slug} --jq .visibility on demand, returning true only when the API confirms the repo is public; validates owner/repo slug format and returns false on any failure
• validatePushToPullRequestBranchWarnings — gates the wildcard fetch warning on !c.computeIsPublicRepo(); visibility is resolved lazily, only when the warning is about to fire

Safe-by-default: if visibility cannot be determined (no auth, network error, missing or malformed slug), the warning is still shown.

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[Copilot]

Pull request overview

Adds repository-visibility awareness to the workflow compiler so the push-to-pull-request-branch wildcard-fetch warning is suppressed for public repositories, and wires up CLI-side visibility detection.

Changes:

• Introduces Compiler.isPublicRepo plus WithPublicRepo/SetPublicRepo to record repo visibility.
• Suppresses the target: "*" wildcard-fetch warning when the repo is known to be public.
• CLI now attempts to detect repo visibility via gh api and passes it into the compiler; includes a new unit test for the warning behavior.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File	Description
pkg/workflow/push_to_pull_request_branch_warning_test.go	Adds coverage to ensure wildcard-fetch warning is suppressed when repo visibility is public.
pkg/workflow/push_to_pull_request_branch_validation.go	Gates wildcard-fetch warning on repo visibility (public repos suppress).
pkg/workflow/compiler_types.go	Adds repo visibility field and configuration hooks to the compiler.
pkg/cli/compile_compiler_setup.go	Detects repo visibility via gh api during compiler setup and passes it into the compiler.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.