ci: add Cata dispatch workflow

[jpleva91]

Summary

• Adds cata-dispatch.yml GitHub Actions workflow to enable repository_dispatch events
• Allows the Octi Pulpo brain to dispatch tasks to Cata agents running in this repo via GitHub Actions
• Part of the governed SDLC pipeline where Octi Pulpo coordinates work across repos

Test plan

• Verify workflow file passes GitHub Actions syntax validation
• Test a repository_dispatch event from Octi Pulpo brain targeting this repo
• Confirm Cata agent picks up and executes the dispatched task

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Adds a GitHub Actions workflow to allow external orchestration (Octi Pulpo) to dispatch work to “Cata” agents running in this repository via repository_dispatch, aligning with the governed SDLC automation described in the PR.

Changes:

• Introduces .github/workflows/cata-dispatch.yml triggered by repository_dispatch type octi-pulpo-dispatch.
• Downloads a cata binary from AgentGuardHQ/cata releases and executes it with task metadata from client_payload.
• Reports a completion message at the end of the job.

[Copilot]

GITHUB_TOKEN permissions are not explicitly set. Other workflows in this repo declare least-privilege permissions (e.g., contents: read). Please add an explicit permissions: block (workflow- or job-level) so the token scope is intentional and consistent, especially since this workflow can run on external dispatch.

[Copilot]

Because this workflow runs on repository_dispatch, any actor who can send a dispatch to this repo can trigger it. Consider adding an allowlist check (e.g., github.event.sender.login/github.actor) and/or a shared-secret check in client_payload before running any jobs.

[Copilot]

This job injects DEEPSEEK_API_KEY and GITHUB_TOKEN into a process whose behavior is determined by client_payload.prompt. Tightening dispatch authentication/authorization is especially important here to avoid untrusted prompts leading to secret exfiltration.

[Copilot]

The workflow downloads and executes a cata binary from another repo without pinning a specific version/tag and without integrity verification. Please pin to a known release and verify a checksum/signature before executing to reduce supply-chain risk.

[Copilot]

./cata run ... || echo ... masks agent failures and will still mark this step successful even when the agent exits non-zero. Consider letting the command fail (or capturing the exit code and explicitly failing after reporting) so dispatchers can reliably detect failure.

Suggested change

	./cata run \
	--provider deepseek \
	--model deepseek-chat \
	--max-turns 100 \
	"${TASK_PROMPT}" \
	|| echo "WARN: cata exited non-zero for task ${TASK_ID}"
	if ! ./cata run \
	--provider deepseek \
	--model deepseek-chat \
	--max-turns 100 \
	"${TASK_PROMPT}"; then
	echo "WARN: cata exited non-zero for task ${TASK_ID}"
	exit 1
	fi