Before committing and pushing, query the Gitea API for open PRs in the
apps repo. If any open PR modifies the same kustomization.yaml path and
its diff contains the target tag, exit 0 — the PR is the intended review
gate and the direct push would bypass it.
Fails open on API errors so an outage does not block all deploys.
Fixes bug-nxhza9j2atqk