Safe outputs

Choose which automatic actions Bowerpost may run on each connected repo without explicit per-event approval. Every action defaults to off — you opt in, per repo.