Run one unattended cloud update

First confirm that the API key can access the intended repository, then pass its URL and starting ref in cloud.repos. Enable autoCreatePR only when the job should open a pull request. Save agent.agentId, run.id and run.requestId before the worker can disconnect. Stream status while connected and use wait for the terminal result; call cancel if the job crosses the declared deadline. On success, inspect result.git, the pull request diff, the named checks and any files returned by listArtifacts before anyone merges.