ci: deploy auto-approve-copilot caller workflow

[Riyad-Axeptio]

Deploy the auto-approve-copilot caller workflow so Copilot-reviewed PRs targeting develop are automatically approved by axeptio-bot.

Reusable workflow: axeptio/tech-scripts/.github/workflows/auto-approve-copilot.yml@master
BOT_GITHUB_TOKEN is an org-wide secret — no per-repo setup required.

Closes ENG-12187

[linear]

ENG-12187

[Copilot]

Pull request overview

This PR adds a GitHub Actions workflow that calls Axeptio’s reusable auto-approve-copilot workflow to automatically approve qualifying Copilot-reviewed pull requests via axeptio-bot.

Changes:

• Introduces a new caller workflow triggered on PR and PR review events.
• Adds branch/draft/fork safeguards and passes org secrets (BOT_GITHUB_TOKEN, optional SLACK_BOT_TOKEN) into the reusable workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 2 comments.

[Riyad-Axeptio]

PR Review Summary

5 feedback items processed: 1 fixed, 4 won't fix.

Commits

• 8d2c3d2 — Squashed 3 commits (2 unsigned + 1 merge) into 1 GPG-signed commit (no content change)

Fixed

• C3 — Stale check_run re-evaluation path comment — already removed in the follow-up commit; current text reads "Keep the base.ref list aligned with base_branch below."

Won't fix

• C1, C5 — Multi-branch branches/if: condition — template generic across 14 repos with varying default branch names.
• C2, C4 — @master supply-chain concern — intentional, acknowledged in inline comment. Will pin when auto-approve-copilot-v1.0.0 ships.

All threads resolved.

[Riyad-Axeptio]

Blocked — Public repo limitation

The auto-approve-copilot workflow cannot run on this repository.

Root cause: GitHub prevents public repositories from calling reusable workflows hosted in internal/private repositories. axeptio/tech-scripts is internal; axeptio/wordpress-plugin is public. GitHub rejects the uses: reference at parse time — all runs show conclusion: failure with zero jobs.

Evidence: referenced_workflows: [] on every run (populated correctly on private repos).

Resolution needed in PR #94 (axeptio/tech-scripts): Either inline the job steps for public repo callers, or extract the reusable workflow to a public repo.

This PR will be revisited after the architectural decision is made.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 3 comments.

[axeptio-bot]

Auto-approved by axeptio-bot: 3-rounds (3 Copilot reviews).

[Riyad-Axeptio]

PR Review Summary

3 feedback items processed (round 3): 1 fixed, 2 won't fix.

Fixed

• Thread 3317343837 — PR description updated to clarify standalone inlined workflow (not a reusable caller)

Won't fix

• Thread 3317343884 — ref: master for tech-scripts checkout: intentional, same policy as @master across all repos; will pin when v1.0.0 ships
• Thread 3317343909 — branch list duplication: no shared-constant mechanism in GHA across trigger/if/env; explicit duplication intentional

All threads resolved. axeptio-bot re-requested (3 Copilot rounds — 3-rounds rule eligible).