[Sprint 14] Harden board automation reliability (#216)

[mpaulosky]

Closes #215\n\n## Summary\n- tighten project intake so only sprint

Summary

Closes #

Type of Change

• 🐛 Bug fix (non-breaking change that fixes an issue)
• ✨ Feature (non-breaking change that adds functionality)
• ♻️ Refactor (no behavior change, code cleanup/restructure)
• 🧪 Tests (new or updated tests only)
• 📝 Docs (README, XML docs, comments)
• ⚙️ Infra/CI (GitHub Actions, Aspire, NuGet, deployment)
• 🔒 Security (auth, permissions, secrets, headers)
• 💥 Breaking change (existing behavior changes)

Domain Affected

• 🏗️ Architecture / domain logic / CQRS → Aragorn required
• 🔧 Backend (handlers, repositories, API endpoints, MediatR) → Sam required
• ⚛️ Frontend (Blazor components, Razor pages, CSS, JS) → Legolas required
• 🧪 Unit / bUnit / integration tests → Gimli required
• 🧪 E2E / Playwright / Aspire integration tests → Pippin required
• ⚙️ CI/CD / GitHub Actions / NuGet / Aspire AppHost → Boromir required
• 🔒 Auth0 / authorization / security-relevant changes → Gandalf required
• 📝 Docs / README / XML docs → Frodo required

Self-Review Checklist

Code Quality

• I ran dotnet build MyBlog.slnx --configuration Release — 0 errors, 0 warnings
• I ran dotnet test MyBlog.slnx --configuration Release --no-build — all pass
• No TODO/FIXME left unless tracked in a follow-up issue (link it)
• No secrets, API keys, or credentials committed

Architecture

• New handlers follow the Command/Query/Handler/Validator naming conventions
• New handlers are sealed
• Domain layer has no references to Web or Persistence.* projects
• Result<T> / ResultErrorCode used for expected failures (no exception-driven control flow)
• DTOs are records in Domain.DTOs; Models are in Domain.Models
• No DTO types embedded in Model classes

Tests

• New code has corresponding unit tests
• Integration tests use domain-specific collections ([Collection("XxxIntegration")])
• No test compares two IssueDto.Empty / CommentDto.Empty instances directly

Security (check if security-relevant)

• New endpoints have appropriate RequireAuthorization / policy applied
• No MarkupString used with user-supplied content
• No user input reflected in MongoDB queries without sanitization

Merge Readiness

• Branch is up to date with main (no merge conflicts)
• CI checks are green (do not request review while checks are pending/failing)
• PR description is complete — reviewers should not have to ask what this does

Screenshots / Evidence

Notes for Reviewers

[github-actions]

🏗️ PR Added to Squad Triage Queue

This PR has been labeled with squad and added to the triage queue.

Next steps:

• The squad Lead will review and assign to an appropriate team member
• A squad:member label will be added after triage

If you know which squad member should handle this, you can add the appropriate squad:member label yourself.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[github-actions]

Test Results Summary

273 tests  ±0   273 ✅ ±0   15s ⏱️ -1s
  6 suites ±0     0 💤 ±0 
  6 files   ±0     0 ❌ ±0 

Results for commit ff312f9. ± Comparison against base commit cf0f16b.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.64%. Comparing base (cf0f16b) to head (ff312f9).
⚠️ Report is 1 commits behind head on dev.

Additional details and impacted files

@@           Coverage Diff           @@
##              dev     #218   +/-   ##
=======================================
  Coverage   78.64%   78.64%           
=======================================
  Files          43       43           
  Lines         721      721           
  Branches      112      112           
=======================================
  Hits          567      567           
  Misses        108      108           
  Partials       46       46           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.