For users who want to review before merging into main: each save creates a new branch + opens a PR rather than push to main directly.
Implementation: options gains a "direct push / open PR" toggle; git-data.ts gains createBranch + createPullRequest; pipeline branches by config.
