Sweep: every setup error that says 'edit config' or 'run X' should auto-fix or offer one click #4552

Follow-up to v0.66.0, which fixed three cases found on a fresh WSL2 host:

• Missing tracker config → github_repo is now inferred from the origin remote (dashboard boot, pan sync, project setup).
• First message to a new conversation refused with agent_blocked → conversation cwds are now pre-trusted, and the refusal quotes the dialog.
• Codex auth banner stuck after codex login → the status check now re-copies the credentials into CLIProxy; a refreshable token is not expired.

Rule: like the Herdr host setup that pan install/pan sync own, any setup problem Overdeck can fix itself, it fixes. Problems it cannot fix get one clear action button in the dashboard, never "edit this file".

Work: audit every dashboard error/hint and every pan doctor fix: line that tells the operator to hand-edit ~/.overdeck/projects.yaml, config.yaml, or other config, or to run a CLI command. Decide for each one: auto-fix (at boot or during pan sync/pan install), one-click fix, or keep as is with a stated reason.

Also check whether a fresh host shows any other first-launch Claude Code dialog (onboarding, auto-mode opt-in) that blocks conversation delivery the way the trust dialog did. Compare the hasSeen*/skip* flags a used host has in ~/.claude.json and ~/.claude/settings.json.

🤖 Generated with Claude Code