docs: require CI green before any merge (AGENTS.md + .cursorrules)

Adds an explicit gate: no PR may be merged while GitHub Actions checks are yellow (pending) or red (failing). Updated in three places in each file — the task lifecycle steps, the verification checklist, and the anti-patterns list — so the rule appears wherever an agent or developer looks when deciding whether to merge.