openclaw - 💡(How to fix) Fix pr-release: add config, operator authorization, and command skeleton

What to build

Add the first vertical path for the Lark-controlled PR/release workflow: configuration, operator authorization, and a registered command surface for /openclaw pr-release subcommands. The command should parse scan, continue, retry, retry-failed, retry-release, retry-release-failed, complete, and cancel without performing GitHub side effects yet.

Acceptance criteria

• Config supports Lark operator allowlist, GitHub token env names/fallback, default source/target branches, repo entries, storage path, workspace paths, release concurrency, audit retention, and stale timeout.
• String and object repo config forms normalize to one internal shape; disabled repos are skipped by default scans.
• Command parsing accepts the specified subcommands and rejects invalid branch/version/repo inputs with clear operator-facing text.
• Only configured Lark operators can invoke mutating workflow actions.
• Branch overrides and ad-hoc repos return confirmation-required results instead of scanning immediately.
• Unit tests cover parsing, repo normalization, operator checks, and warning confirmation decisions.

Blocked by

None - can start immediately