chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• agents-weekly-metrics.yml: Weekly metrics - aggregates auto-pilot, keepalive, autofix and verifier metrics into summary reports
• bot_comment_auth_coverage.js: Warning-only bot-comment App auth coverage preflight
• weekly_metrics_artifacts.js: Bounded weekly metrics artifact selection contract

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• dependabot.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Manifest: .github/sync-manifest.yml

[agents-workflows-bot]

⚠️ Action Required: Unable to determine source issue for PR #845. The PR title, branch name, or body must contain the issue number (e.g. #123, branch: issue-123, or the hidden marker ).

[agents-workflows-bot]

🤖 Keepalive Loop Status

PR #845 | Agent: Codex | Iteration 0/5

Current State

Metric	Value
Iteration progress	[----------] 0/5
Action	wait (missing-agent-label)
Disposition	skipped (transient)
Gate	success
Tasks	0/7 complete
Timeout	45 min (default)
Timeout usage	6m elapsed (15%, 39m remaining)
Keepalive	❌ disabled
Autofix	❌ disabled

🔍 Failure Classification

| Error type | infrastructure |
| Error category | resource |
| Suggested recovery | Confirm the referenced resource exists (repo, PR, branch, workflow, or file). |

[agents-workflows-bot]

Keepalive Work Log (click to expand)

#	Time (UTC)	Agent	Action	Result	Files	Tasks	Progress	Commit	Gate
0	2026-04-25 18:49:07	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	cancelled
0	2026-04-25 18:51:08	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	cancelled
0	2026-04-25 18:53:07	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	success

[Copilot]

Pull request overview

Syncs workflow templates from stranske/Workflows, extending the weekly metrics workflow to include a new bot-comment App auth coverage preflight and ensuring the artifact selector recognizes the new artifact families.

Changes:

• Extend agents-weekly-metrics.yml to run a new bot_comment_auth_coverage.js preflight and upload its JSON/MD outputs.
• Update weekly artifact selection to include/prioritize bot-comment-auth-coverage-* artifact families.
• Add bot_comment_auth_coverage.js script to summarize bot-comment auth coverage (JSON + markdown) and optionally hard-block based on repo vars.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/agents-weekly-metrics.yml	Adds bot-comment auth coverage preflight step, uploads new summary artifacts, and enforces combined hard-block status.
.github/scripts/weekly_metrics_artifacts.js	Includes new bot-comment auth coverage artifact prefixes/families in weekly selection and priority list.
.github/scripts/bot_comment_auth_coverage.js	New script to scan downloaded artifacts, summarize auth-mode coverage, emit JSON/MD, and return fail status when hard-block mode is active.

[Copilot]

The step summary/append logic checks for a hard-coded markdown filename (bot-comment-auth-coverage-summary.md) even though the output path is already configurable via BOT_COMMENT_AUTH_COVERAGE_MD. This will break the summary output if the env var is changed later; use the env var (or a local variable derived from it) for the file existence check and cat operations instead of duplicating the literal filename.

Suggested change

	if [ -f bot-comment-auth-coverage-summary.md ]; then
	cat bot-comment-auth-coverage-summary.md >> "$GITHUB_STEP_SUMMARY"
	if [ -f agent-weekly-metrics.md ]; then
	{
	printf '\n'
	cat bot-comment-auth-coverage-summary.md
	bot_comment_auth_coverage_md="${BOT_COMMENT_AUTH_COVERAGE_MD}"
	if [ -f "${bot_comment_auth_coverage_md}" ]; then
	cat "${bot_comment_auth_coverage_md}" >> "$GITHUB_STEP_SUMMARY"
	if [ -f agent-weekly-metrics.md ]; then
	{
	printf '\n'
	cat "${bot_comment_auth_coverage_md}"