fix(monopam): use public HTTPS URLs in opam files, commit before push
- pkg.ml: derive_dev_repo now constructs opam dev-repo/url from the
origin base URL (HTTPS) instead of the sources.toml entry source
(often SSH/SCP). Falls back to entry source when no origin is set.
This fixes opam failing to fetch from SCP-style URLs like
git@host:path which it mis-parses.
- push.ml: add commit_pending to stage+commit pending changes in
workspace repos (e.g. opam-repo) before pushing, so generated
opam files are not left uncommitted.
- opam_sync.ml: delegate derive_urls to Pkg.derive_dev_repo to
remove duplicate URL derivation logic. Add ensure_repo_file for
opam-repo metadata.
- test_pkg.ml: update tests to expect HTTPS origin URLs, add
test for no-origin fallback to entry source (129 tests).
- merlint e617: add multi-line suite definition cram test.