bitacora-rollout pushes every consumer PR at once, past NaN's five review slots #3188

scripts/bitacora-rollout.sh opens or updates the rollout PR in every consumer within a few minutes. Each push starts a PR-Agent review, and NaN serves 5 requests at a time (shared with pi, qq and hive embeddings). The reviews past the fifth publish nothing, and the review push gate goes red with "PR-Agent reported success but published no review" (the detection from #1107).

Observed twice on 2026-11-05, 8 repositories each time:

• First rollout, which opened the PRs: no review on ci: deploy bitácora workflows (OPS-002) hive#568, ci: deploy bitácora workflows (OPS-002) iris#59 and ci: deploy bitácora workflows (OPS-002) pollex#123.
• Re-run after fix(bitacora): retry the read-then-write as one unit and read GraphQL rate-limit headers #3187, which added commits: no review on ci: deploy bitácora workflows (OPS-002) hive#568, ci: deploy bitácora workflows (OPS-002) pdf-modifier#233 and ci: deploy bitácora workflows (OPS-002) pollex#123. The failed jobs were re-run by hand.

Each consumer PR then waits on a manual re-run, or reads as unreviewed.

Fix

Space the protected-branch PR pushes, so no more reviews run at once than NaN serves. One option: process repositories in batches below the slot count, with a pause between batches. Alternatively, the review job could retry when it detects the "published no review" case, with backoff, instead of failing.

Acceptance

• A rollout over 8 or more repositories leaves every consumer PR with a published PR-Agent review and no manual re-run.
• A test pins the pacing, or the retry, so it cannot regress silently.