Add WIP PR Draft Guard to auto-convert [WIP]/WIP: PRs to draft

[Copilot]

PRs with WIP-prefixed titles were flowing through full reviewer/smoke fan-out even when explicitly not ready. This adds a lightweight PR-time guard that converts those PRs to draft and leaves a single guidance comment.

• What changed

  • Added new workflow: .github/workflows/wip-pr-draft-guard.md (and compiled .lock.yml).
  • Trigger: pull_request on opened and edited.
  • Activation gate: PR title starts with [WIP], WIP:, [wip], or wip:.

• Behavior

  • If matching PR is not draft: call update_pull_request with draft: true.
  • Post one concise guidance comment telling authors to remove the WIP prefix and mark ready when complete.
  • If no state change is needed: emit noop.

• Safety/constraints

  • Uses safe-outputs only (update-pull-request, add-comment, noop).
  • Read-only repo permissions + copilot-requests: write; no direct write permissions on PR resources.

on:
  pull_request:
    types: [opened, edited]
if: startsWith(github.event.pull_request.title, '[WIP]') || startsWith(github.event.pull_request.title, 'WIP:') || startsWith(github.event.pull_request.title, '[wip]') || startsWith(github.event.pull_request.title, 'wip:')
safe-outputs:
  update-pull-request:
    title: false
    body: false