fix(ci): add new handler files to compat-literals allowlist

[ptone]

Summary

• Adds handlers_projects_core.go and handlers_runtime_brokers.go to the compat-literals allowlist in hack/check-project-compat-literals.sh
• These files contain legitimate legacy grove literals for backward compatibility (JSON unmarshaling, URL path fallbacks)
• Unblocks CI for PRs feat(web): move Capture Auth button to terminal page GoogleCloudPlatform/scion#520, fix(discord): require thread ID for forum channels to prevent broadcast GoogleCloudPlatform/scion#522, fix(runtime): replace bind-mount secret staging with env-var pipeline for stateless brokers GoogleCloudPlatform/scion#523, fix(message): enforce 2000-char limit and return actionable error for oversized messages GoogleCloudPlatform/scion#524, feat(agent): retry with backoff and two-layer TTL cache for GitHub skill resolver GoogleCloudPlatform/scion#525, fix(web): detect incomplete embedded assets and serve helpful error page GoogleCloudPlatform/scion#526

Test plan

• CI compat-literals check passes with these files in the allowlist

[gemini-code-assist]

Code Review

This pull request updates the 'hack/check-project-compat-literals.sh' script to include 'pkg/hub/handlers_projects_core.go' and 'pkg/hub/handlers_runtime_brokers.go' in the 'allowed_paths' list. There are no review comments on this pull request, and I have no further feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.