fix: story tasks get Project field; elaborate reads worklog; deploy chmod scripts

- handleApproveStory: set Project = input.ProjectID on tasks and subtasks so
  the executor can resolve RepositoryURL from the project registry (was causing
  "task has no repository_url" on every story task)
- elaborate.go: read .agent/worklog.md instead of SESSION_STATE.md for project
  context injected into elaboration prompts
- deploy: explicitly chmod +x all scripts before restart (same root cause as
  the binary execute-bit loss — chown -R was stripping it)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

1 files changed, 2 insertions, 1 deletions

diff --git a/scripts/deploy b/scripts/deploy
index 7c7dc66..1a08fc5 100755
--- a/scripts/deploy
+++ b/scripts/deploy
@@ -53,8 +53,9 @@ echo "==> Fixing permissions..."
 echo "==> Syncing credentials..."
 "${REPO_DIR}/scripts/sync-credentials"
 
-echo "==> Ensuring binary is executable..."
+echo "==> Ensuring binary and scripts are executable..."
 chmod +x "${BIN_DIR}/claudomator" /usr/local/bin/claudomator
+find "${SITE_DIR}/scripts" -maxdepth 1 -type f -exec chmod +x {} +
 
 echo "==> Restarting service..."
 sudo systemctl restart "${SERVICE}"