ci: use --admin to merge OpenAPI sync PR past branch protection (#288)

The immediate `gh pr merge` was rejected by the base-branch policy
(required status check), since the merge API enforces branch protection
unless a bypass is requested. Checks are already confirmed green by the
preceding `gh pr checks --watch --fail-fast`, so the admin bot token can
safely bypass on the final merge call.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: prrao87

.github/workflows/sync-openapi.yml

@@ -57,4 +57,7 @@ jobs:
             sleep 15
           done
           gh pr checks "$pr" -R "$GITHUB_REPOSITORY" --watch --fail-fast --interval 30
-          gh pr merge "$pr" -R "$GITHUB_REPOSITORY" --squash --delete-branch
+          # --admin bypasses the "require status check" base-branch policy on the
+          # immediate merge. Safe here: checks are already confirmed green above, and
+          # the bot token (admin) only ever merges this one bot-generated sync PR.
+          gh pr merge "$pr" -R "$GITHUB_REPOSITORY" --squash --delete-branch --admin