fix(ci): green governance PG on isolated TEST_DATABASE_URL

Add duty holders as project members, drop sync notification assert
after outbox cutover, and add an explicit CI governance PG step.

Co-authored-by: Cursor <cursoragent@cursor.com>

.github/workflows/ci.yml

@@ -45,6 +45,11 @@ jobs:
           TEST_DATABASE_URL: postgres://app:ci_secret_db_pass@localhost:5432/agent_system_ci?sslmode=disable
         run: go test -short -timeout 20m ./...
 
+      - name: governance PG integration (no -short)
+        env:
+          TEST_DATABASE_URL: postgres://app:ci_secret_db_pass@localhost:5432/agent_system_ci?sslmode=disable
+        run: go test -count=1 -timeout 15m ./internal/server/ -run 'TestWorkflowGovernance_PG_|TestE2E_WorkflowGovernance'
+
       - name: arch-check (block cleared kinds)
         run: ./scripts/arch-check.sh --mode block