infra: add auto-approve-copilot-runs workflow

[Copilot]

Completes the Copilot PR lifecycle automation by adding the one missing workflow. ci.yml and copilot-pr-lifecycle.yml already existed; only auto-approve-copilot-runs.yml was absent.

Changes

• .github/workflows/auto-approve-copilot-runs.yml — new workflow that listens on workflow_run: requested and immediately approves any run whose actor is Copilot via the GitHub REST API. Uses built-in GITHUB_TOKEN with actions: write only.

on:
  workflow_run:
    workflows: ['*']
    types: [requested]

permissions:
  actions: write

jobs:
  auto-approve:
    runs-on: ubuntu-latest
    if: github.event.workflow_run.actor.login == 'Copilot'
    steps:
      - name: Approve workflow run
        run: |
          gh api \
            --method POST \
            repos/${{ github.repository }}/actions/runs/${{ github.event.workflow_run.id }}/approve
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

The 'Copilot' actor login is consistent with the check already used in copilot-pr-lifecycle.yml.

Out of scope here: adding this repo to the praxis-business tier-1 list and plures/qa test suites — those require changes in their respective repositories.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>infra: add Copilot PR lifecycle + auto-approve + CI workflows</issue_title>
<issue_description>## Summary
Onboard FinancialAdvisor into the praxis-business managed repo ecosystem with full lifecycle automation.

Requirements

• .github/workflows/copilot-pr-lifecycle.yml — auto-merge Copilot PRs after review
• .github/workflows/auto-approve-copilot-runs.yml — approve action_required runs
• .github/workflows/ci.yml — lint, type-check, test, build on every PR
• Add to praxis-business cross-repo manager tier 1 list
• Add to QA system (plures/qa) test suites

Acceptance

• Copilot PRs auto-merge after approved review
• CI runs on every PR
• Repo appears on praxis-business dashboard
• QA runs against this repo</issue_description>

Comments on the Issue (you are @copilot in this section)

@kayodebristol @copilot Please implement this issue.

• Fixes infra: add Copilot PR lifecycle + auto-approve + CI workflows #77

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[Copilot]

Pull request overview

Adds the missing GitHub Actions workflow to complete this repo’s Copilot PR lifecycle automation by automatically approving Copilot-triggered workflow runs via the GitHub REST API.

Changes:

• Introduces a new .github/workflows/auto-approve-copilot-runs.yml workflow triggered on workflow_run to auto-approve runs when the triggering actor is Copilot.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

on.workflow_run.workflows: ['*'] won’t match any workflows in this repo (filters are by exact workflow name, and there is no workflow named *). As a result, this workflow likely never triggers and the auto-approve behavior won’t run. Update this to list the actual workflow names you intend to auto-approve (e.g., "CI/CD Pipeline", etc.), and ensure you don’t include this workflow’s own name to avoid self-trigger loops.

Suggested change

	workflows: ['*']
	workflows: ['CI/CD Pipeline', 'Tests']

[kayodebristol]

Auto-approved: CI green + Copilot code review complete.