# DEVX-174: Set git identity in dep-PR target clone

## Problem

`create_dependency_pr` commits the manifest bump in a fresh clone of the
target repo. The clone has no `user.name`/`user.email`, so `git commit`
exits 128 ("Please tell me who you are") — observed in sso-bridge
post-merge run 6284 after the digest and manifest bump both succeeded.

## Approach

REQ-1: Pass a CI bot identity inline (`git -c user.name=... -c
user.email=... commit`) so the commit works in any environment without
mutating global git config.

## Test Plan

- Unit test asserting the commit invocation carries `-c user.name` /
  `-c user.email` arguments.

## Deploy Plan

devx release; sso-bridge picks it up via its devx pin on next bump.

## Rollback Plan

Revert; dep-PR commit fails again in containers without git identity.

## Acceptance Criteria

- [x] REQ-1: dep-PR commit supplies explicit identity flags.