Gated sync/closeout PRs cannot regenerate CHANGELOG.md because the changelog recipe lives in the justfile #90

Raised by CodeRabbit on #84. pm-github's reusable sync and closeout workflows only run an npm script from npm-project-dir after the tracker change. pm-rust's callers use tests/oracle, which has no scripts, so both post-change scripts are disabled. A closeout PR that closes items therefore ships an unchanged CHANGELOG.md, and the dispatched ci.yml (just release-check → just changelog-check) rejects it.

Options:

1. Add "changelog:full" to tests/oracle/package.json, delegating to the single source of truth: just changelog-full from the repository root. This needs just on the runner, so either the reusable workflow installs it, or a node wrapper reproduces the recipe from the justfile constants.
2. Add an optional pm-github input that installs a named tool (pinned action) before the post-change script.

Until this is fixed, a closeout PR needs a manual just changelog-full push.