docs: setup-checklist for post-push manual steps (5q6.3)

[R0SEWT]

Closes the doc half of project-kit-5q6.3: capture the account/repo-settings steps the scaffold can't commit but a minimal collab-ready repo wants.

Scope (inclusion criterion stated in the doc): only steps that (a) can't be committed and (b) belong on a minimal collab-ready repo.

• Branch protection / require-review — with the solo-dev traps (your own approval doesn't count on your own PR; * @owner CODEOWNERS self-block).
• Copilot automatic code review — account/repo toggle (not a committable file), enabled as an independent ruleset (no merge-gate needed since Sept 2025); needs a paid Copilot plan (Pro = entry tier). Trap: Copilot leaves a Comment review, which does not satisfy a require-approval rule.
• Note — Actions-minute billing for Copilot review on private repos as of 2026-06-01 (public stays free).
• Explicit out-of-scope line so it can't sprawl.

Facts web-verified at authoring time (the "Pro/Pro+" memory was corrected to "any paid plan, Pro entry tier").

Does not touch scaffold.sh: the scaffold pointer to this doc is a separate, intentionally-deferred bead (5q6.8; public-URL-vs-local-path decision made there).

[sourcery-ai]

Reviewer's Guide

Adds a new SETUP-CHECKLIST.md document that captures post-push, non-committable GitHub settings needed for a minimal, collaboration-ready repository, including branch protection/require-review guidance, Copilot automatic code review setup, and a billing note for Copilot-related Actions usage.

Flow diagram for post-push GitHub setup checklist

flowchart TD
  Start([First push of new repo])
  BranchProtection[Configure branch protection and require_review]
  SoloDev{Working solo?}
  Approvals[Require approvals and use second human/account]
  NoApprovals[Do not require approvals (or add later)]
  CopilotReview[Enable Copilot automatic code review ruleset]
  BillingNote[Be aware Copilot review uses Actions minutes on private repos]
  End([Repo is minimally collab-ready])

  Start --> BranchProtection
  BranchProtection --> SoloDev
  SoloDev -->|Yes| Approvals
  SoloDev -->|No| NoApprovals
  Approvals --> CopilotReview
  NoApprovals --> CopilotReview
  CopilotReview --> BillingNote
  BillingNote --> End

Loading

File-Level Changes

Change	Details	Files
Document post-push GitHub configuration steps that cannot be committed but are recommended for a minimal collaboration-ready repo.	Create a new SETUP-CHECKLIST.md describing manual account/repo settings to perform after first push. Clarify the inclusion scope to only non-committable settings appropriate for a minimal collab-ready repository and explicitly exclude advanced, project-specific configuration. Explain how to configure branch protection and required reviews on the default branch, including solo-developer edge cases around self-approval and CODEOWNERS ownership. Describe how to enable GitHub Copilot automatic code review as an independent ruleset, its licensing requirements, and the limitation that its reviews are comments that do not satisfy approval requirements. Add an informational note that Copilot code review now consumes GitHub Actions minutes on private repositories as of June 1, 2026, while remaining free on public repositories.	SETUP-CHECKLIST.md

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

Hey - I've left some high level feedback:

• The doc hardcodes time-bound details (e.g., 'since Sept 2025', 'Since June 1, 2026', specific Copilot pricing) that may go stale quickly; consider rephrasing to be less date/price-specific or linking to GitHub’s official docs for current behavior and pricing instead.
• The note about org members using Copilot 'with no license if the org enables the policy' could be clarified or linked to GitHub’s policy docs, since licensing rules are nuanced and may vary by plan and organization settings.

Prompt for AI Agents

Please address the comments from this code review:

## Overall Comments
- The doc hardcodes time-bound details (e.g., 'since Sept 2025', 'Since June 1, 2026', specific Copilot pricing) that may go stale quickly; consider rephrasing to be less date/price-specific or linking to GitHub’s official docs for current behavior and pricing instead.
- The note about org members using Copilot 'with no license if the org enables the policy' could be clarified or linked to GitHub’s policy docs, since licensing rules are nuanced and may vary by plan and organization settings.

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[Copilot]

Copilot reviewed 1 out of 1 changed files in this pull request and generated no comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.