feat(workflows): add clippy-fixer agentic workflow (#575)

Daily workflow that runs cargo clippy across the workspace and opens

a focused, conventional-commits-titled PR for any warnings it finds.

Mirrors the bash-lint-auditor pattern: read-only permissions, writes

via safe-outputs (create-pull-request, max 1, allowed-files scoped to

src/, tests/, examples/, ado-aw-derive/, Cargo.toml/lock), one focused

scope per run, full cargo build + test + clippy validation before

opening a PR, and cache-memory state to avoid duplicate PRs.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: jamesadevine