v2.1.0 — "Needs you" triage, automation filters, smarter rebasing

This release builds on v2.0.0's multi-account foundation and turns the popup
from a passive auto-rebase list into a lightweight PR command center: a
first-class surface for the PRs that need your hand, opt-in filters so
automations only touch the repos you want, and rebasing that holds back when CI
is red.

Highlights

• "Needs you" triage surface. A dedicated section at the top of the popup that
  collects only the PRs waiting on you — merge conflicts, rebase-rejected
  branches, PRs that need a manual resolve, and push-since-approval re-reviews —
  each with a one-click deep link to exactly where the work is. PRs the
  automations already handle don't clutter it.
• Automation filters (opt-in). Scope which PRs the cleanup automations act on:
  allow/deny by repo, skip draft PRs, and include/exclude by label. Filtered PRs
  stay in your list — the automations just skip them quietly, the same way an
  ignored repo is left untouched.
• CI-aware rebasing. Auto-rebase now holds off when a PR's required checks are
  failing instead of rebasing into a known-red branch, and backs off
  intelligently on conflict-prone PRs. When CI is the blocker, the row shows the
  failing check names (clickable through to the run when the URL is a trusted
  GitHub/GHES link).

Other improvements

• Click a notification to open its PR. Desktop notifications now deep-link
  straight to the PR they're about.
• Conflict links point at the PR page. The "open conflicts" / "resolve
  conflict" actions in the "Needs you" section now link to the PR itself (the old
  /conflicts deep link could 404 or redirect).
• Per-account notification throttling. The notification throttle is now scoped
  per account and qualified by repo, so a quiet account no longer suppresses
  alerts on a busy one.
• Settings partition fix. Global vs per-account settings are now read from a
  single source of truth, fixing cases where a per-account override could read the
  wrong scope.
• Access tokens moved to session storage. The GitHub App access token is now
  held in chrome.storage.session rather than local, shrinking the at-rest
  footprint of a short-lived credential.
• Polling reliability. Fixed a popup re-poll loop that could fire POLL_NOW
  repeatedly on open, corrected reviewer-state and authored-PR transition
  detection, and tightened the poll spinner so it shows on auto-poll-on-open and
  clears cleanly on unmount.

Migration

No storage migration. v2.1.0 reads the existing v2.0.0 per-account storage shape
directly. New automation-filter settings default to off (no PRs filtered) until
you opt in.

Permissions

No new install-time permissions. notifications remains an optional permission
requested at runtime when you opt in.

v2.0.0 — Multi-account, reviewer dashboard, push-since-approval.

Highlights:
- Multi-account support — add multiple GitHub accounts to one install and switch from the popup
header.
- Reviewer dashboard tab — PRs where you're a requested reviewer or assignee, with state chips and
optional conservative auto-merge per allowlisted repo.
- Push-since-approval badge — PRs that received new commits after your last approval surface a
"re-review" chip.
- Settings split — global (shared across accounts) vs per-account.
- Header repo-filter chip — narrow the popup PR list to a subset of repos.
- Desktop notifications (opt-in) — per-event toggles for rebased / conflicted / merged / idle /
ping-confirmed.
- Stale-PR badge with one-click reviewer @-mention.

Full changelog: https://github.com/bradygrapentine/auto-rebaser/releases/tag/v2.0.0