Expand rule actions for per-repo tasks

Add safe action interpolation and for_each binding for rule fan-out, update the weekly SBOM definition, cover the new evaluation path, and reconcile activity-core scope/workplans for the State Hub sync.

src/activity_core/workflows.py

@@ -114,7 +114,7 @@ class RunActivityWorkflow:
             except Exception:
                 pass
 
-        matched_rules: list[dict] = await workflow.execute_activity(
+        task_spec_dicts: list[dict] = await workflow.execute_activity(
             evaluate_rules,
             {
                 "rules": defn.get("rules", []),
@@ -125,22 +125,6 @@ class RunActivityWorkflow:
             retry_policy=_RETRY_POLICY,
         )
 
-        # Convert matched rules to TaskSpec dicts for emission.
-        task_spec_dicts: list[dict] = []
-        for rule in matched_rules:
-            action = rule.get("action", {})
-            task_spec_dicts.append({
-                "title": action.get("task_template", rule.get("id", "")),
-                "description": "",
-                "target_repo": action.get("target_repo"),
-                "priority": action.get("priority", "medium"),
-                "labels": action.get("labels", []),
-                "due_in_days": action.get("due_in_days"),
-                "source_type": "rule",
-                "source_id": rule.get("id", ""),
-                "condition": rule.get("condition", ""),
-            })
-
         report_dicts: list[dict] = []
         if defn.get("instructions"):
             instruction_result: dict = await workflow.execute_activity(