chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• pr-46-dependency-repair-contract.yml: Dependency repair contract - keeps bot PRs bot-owned and validates agent repair promotion provenance
• agents-80-pr-event-hub.yml: PR event hub - consolidates PR meta, bot comments, and verify-to-issue handlers
• agents-issue-optimizer.yml: Issue optimizer - LangChain-based issue formatting and optimization (Phase 1)
• agents-verify-to-new-pr.yml: Verify to new PR - creates follow-up issue and immediately dispatches auto-pilot to prepare a replacement PR (bridge inlined)
• agents-auto-label.yml: Auto-label - suggests/applies labels based on semantic matching (Phase 5A)
• agents-capability-check.yml: Capability check - pre-flight agent feasibility gate (Phase 3A)
• agents-decompose.yml: Task decomposition - breaks large issues into sub-tasks (Phase 3B)
• agents-dedup.yml: Duplicate detection - flags similar open issues (Phase 3C)
• agents-auto-pilot.yml: Auto-pilot - end-to-end automation orchestrator (format → optimize → agent → verify)
• agents-weekly-metrics.yml: Weekly metrics - aggregates auto-pilot, keepalive, autofix and verifier metrics into summary reports
• backplane-conformance.yml: Backplane conformance caller stub - calls reusable-backplane-conformance.yml@main to validate a repo's emitted run-contract/v1 envelope (producer) or ingested object (consumer). No-op for non-participants (opt-in). Template lives under templates/consumer-repo/.github/workflows/.
• source_context.js: Classifies PR workflow source context for issue, local, automation, sync, Dependabot, review follow-up, and direct GitHub work
• agents_pr_meta_keepalive.js: PR metadata handling for keepalive

Files Skipped

• .github/workflows/pr-00-gate.yml: Maintains a fully custom Gate workflow; never overwrite (replaces the hard-coded custom_gate_repos list in maint-68).
• ci.yml: File exists and sync_mode is create_only
• renovate.json: File exists and sync_mode is create_only
• cross-repo-smoke.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: 31339e1d9ba1cedd23648639e271c3c1cabbe939
Template hash: 1a66c2a78165
Sync branch: sync/workflows-1a66c2a78165
Consumer repo: stranske/Manager-Database
Manifest: .github/sync-manifest.yml

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🚫 Review skipped — only excluded labels are configured. (7)

• sync
• workflow:source-sync
• workflow:source-maintenance
• consumer-sync
• integration-sync
• workflows-sync
• template-sync

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 4fa735c2-c383-46b7-aae8-91ae11460034

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Pull request overview

Syncs this repository’s GitHub Actions automation surface from stranske/Workflows, updating agent workflows and shared scripts to the latest template set (including new dependency-repair provenance gating and expanded keepalive/labeling behaviors).

Changes:

• Adds PR 46 “dependency repair contract” enforcement for Dependabot/Renovate and controlled dependency-repair promotion markers.
• Updates multiple agent workflows to the latest pinned action SHAs (notably actions/setup-python@v7) and expands sparse checkouts to include config/.
• Extends automation scripts/workflows for better PR source-context classification and keepalive/autopilot stall handling.

Reviewed changes

Copilot reviewed 13 out of 13 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
.github/workflows/pr-46-dependency-repair-contract.yml	New PR-targeted contract gate to validate dependency-repair promotion provenance.
.github/workflows/backplane-conformance.yml	Updates Python setup action pin to the synced template version.
.github/workflows/agents-weekly-metrics.yml	Updates Python setup action pin to the synced template version.
.github/workflows/agents-verify-to-new-pr.yml	Adds config/ to sparse checkout; updates Python setup action pin.
.github/workflows/agents-issue-optimizer.yml	Adds config/ to sparse checkout; updates Python setup action pin.
.github/workflows/agents-dedup.yml	Updates Python setup action pin to the synced template version.
.github/workflows/agents-decompose.yml	Updates Python setup action pin to the synced template version.
.github/workflows/agents-capability-check.yml	Updates Python setup action pin to the synced template version.
.github/workflows/agents-auto-pilot.yml	Enhances stall-handling/keepalive handoff logic; adds secret-availability flags.
.github/workflows/agents-auto-label.yml	Adds concurrency and query-size bounding; expands “skip” logic for campaign issues.
.github/workflows/agents-80-pr-event-hub.yml	Adds config/ to sparse checkout; disables cone mode; updates Python setup action pin.
.github/scripts/source_context.js	Adds parsing/trust logic for dependency-repair promotion markers to refine PR source classification.
.github/scripts/agents_pr_meta_keepalive.js	Uses resolved PR source context to decide whether an issue number should be emitted.