chore: update tend workflows (0.3.5 → 0.3.7)

[worktrunk-bot]

Regenerates the Tend workflows with tend 0.3.7 (from 0.3.5). The effect for this repo: the generated workflows now pin third-party actions and uv to commits and checksums, and the bot's sessions pick up 0.3.6–0.3.7's skill and runner fixes. No .config/tend.yaml change was needed.

What changes for worktrunk:

• Supply-chain pinning — actions/checkout and astral-sh/setup-uv are pinned to commit SHAs (version kept as a comment), and the uv download (bumped to 0.12.22) is verified against a per-arch checksum (Pin third-party actions, uv, and pre-commit hooks to commits and checksums tend#1463).
• Mention prompt moves into a skill — tend-mention now invokes /tend-ci-runner:mention and passes only the triggering event; the per-event "read the context, respond, make changes" instructions that were inlined in the workflow now live in the skill.
• fetch-tags: true is dropped from checkouts. Every Tend checkout uses fetch-depth: 0, which already fetches all tags, so build.rs's git describe still sees them.
• CI polling no longer waits on a job held for environment approval (Stop the CI poll from waiting on a job held for environment approval tend#1473), and nightly reads the last successful run more robustly so a cached listing can't widen its review range (fix(nightly): read the last successful run at several limits so a cached listing can't widen the review range tend#1468).
• Triage opens a PR when a maintainer is reasonably likely to merge it rather than defaulting to a comment (fix(triage): open a PR when a maintainer is reasonably likely to merge it tend#1471), and repair sessions resume unfinished bot work from the live PR state (Resume unfinished bot repairs from live PR state tend#1479).
• Claude Code is bumped to 2.1.288 (chore: bump Claude Code to 2.1.288 tend#1491).

Full upstream diff: max-sixty/tend@0.3.5...0.3.7