Closes the Repositories parity group (minus blame and file edit, blocked upstream on krz/gitbay#42/#43):
- Pin/unpin from the repo actions menu, state read from the dashboard aggregate (the one place pins are readable)
- Settings screen: description, website, visibility, topics, protected branches, require-approvals/-resolved/-checks/-signed, git-daemon — one command per knob, admin-gated with the refusal shown verbatim to non-admins
- repo create (+ on the list, --private toggle), archive/unarchive behind a confirmation, build trigger with the job prefilled
- Fix worth noting: toggles/stepper now hold real local state mirrored from the server; the computed-Binding-spawning-a-Task pattern silently dropped writes under synthesized taps
- Live UI smoke extended: scratch-repo create (deleted by the runner over SSH), pin/unpin, topic, and merge-rule round-trips (all state restored), trigger refusal on a repo without CI config
103 unit tests green; testRepoManagementFlows green against gitbay.org with all state verified restored server-side.
Ref #11