feat(repo-cache, repo-policy-sync): support glob repository selection

[AlexanderLanin]

Why

Repository Policy Sync could only target exact repository names, which made organization-wide rollouts require a manually maintained allowlist. Supporting stable shell-style patterns lets newly created repositories be included automatically while still surfacing invalid selectors clearly.

What changed

• Support case-sensitive Python fnmatch patterns for --repo and TOML repos values.
• Match selectors against the organization listing before any checkout or policy evaluation.
• Distinguish unmatched patterns from missing exact repository names in diagnostics.
• Prevent --recreate from operating on more than one repository after pattern expansion.
• Document pattern syntax and add regression coverage.

Fixes #32

[Copilot]

🟡 Changes recommended

Recreate cardinality is validated only after all matched repositories are synchronized, and one diagnostic misrepresents archived-inclusive selection.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Adds case-sensitive fnmatch repository selection across Repo Cache and Repository Policy Sync.

Changes:

• Expands glob selectors before synchronization.
• Adds unmatched-pattern diagnostics and --recreate validation.
• Documents behavior and adds regression tests.

File summaries

File	Description
repo_cache/src/sync.py	Implements pattern expansion and diagnostics.
repo_cache/src/cli.py	Updates CLI help.
repo_cache/tests/test_sync.py	Tests expansion and errors.
repo_cache/README.md	Documents glob selection.
repo_policy_sync/src/runner.py	Validates expanded recreate targets.
repo_policy_sync/src/cli.py	Updates CLI help.
repo_policy_sync/tests/test_runner.py	Tests recreate cardinality.
repo_policy_sync/tests/test_cli.py	Tests CLI/TOML forwarding.
repo_policy_sync/README.md	Documents pattern syntax.
repo_policy_sync/docs/reference/configuration.md	Documents TOML selectors.
repo_policy_sync/docs/reference/cli.md	Updates CLI reference.
repo_policy_sync/docs/how-to/run-a-policy.md	Adds rollout examples.

Review details

• Files reviewed: 12/12 changed files
• Comments generated: 2
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[MaximilianSoerenPollak]

Talked about in a call. Seems quiet usefull.