chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• agents-weekly-metrics.yml: Weekly metrics - aggregates auto-pilot, keepalive, autofix and verifier metrics into summary reports
• bot_comment_auth_coverage.js: Warning-only bot-comment App auth coverage preflight
• weekly_metrics_artifacts.js: Bounded weekly metrics artifact selection contract

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• dependabot.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Manifest: .github/sync-manifest.yml

[agents-workflows-bot]

🤖 Keepalive Loop Status

PR #84 | Agent: Codex | Iteration 0/5

Current State

Metric	Value
Iteration progress	[----------] 0/5
Action	wait (missing-agent-label)
Disposition	skipped (transient)
Gate	success
Tasks	0/7 complete
Timeout	45 min (default)
Timeout usage	5m elapsed (13%, 40m remaining)
Keepalive	❌ disabled
Autofix	❌ disabled

🔍 Failure Classification

| Error type | infrastructure |
| Error category | resource |
| Suggested recovery | Confirm the referenced resource exists (repo, PR, branch, workflow, or file). |

[agents-workflows-bot]

Keepalive Work Log (click to expand)

#	Time (UTC)	Agent	Action	Result	Files	Tasks	Progress	Commit	Gate
0	2026-04-25 16:16:21	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	—
0	2026-04-25 16:19:04	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	cancelled
0	2026-04-25 16:19:54	Codex	wait (missing-agent-label-transient)	skipped	—	0	0/7	—	success

[Copilot]

Pull request overview

Syncs workflow templates from stranske/Workflows by extending the weekly metrics workflow to include bot-comment App auth coverage signals in the aggregated reporting and artifact selection.

Changes:

• Adds a “Bot-comment auth coverage preflight” step to the weekly metrics workflow and includes its outputs in uploaded artifacts.
• Extends weekly artifact selection to recognize and prioritize bot-comment-auth-coverage-* artifact families.
• Introduces a new Node script to aggregate bot-comment auth coverage JSON records into a summary JSON + markdown report.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/agents-weekly-metrics.yml	Runs the new preflight, appends results to step summary/weekly report, uploads new coverage artifacts, and enforces both coverage hard-blocks.
.github/scripts/weekly_metrics_artifacts.js	Adds bot-comment auth coverage artifact prefixes/families so they are discovered and prioritized during artifact selection.
.github/scripts/bot_comment_auth_coverage.js	New aggregator that scans artifacts, summarizes bot-comment auth coverage status/policy, and emits JSON + markdown.

[Copilot]

isPotentialAuthCoverageFile() matches any wrapper.json / reusable.json basename anywhere under the artifacts directory. Those names are generic and can easily collide with unrelated artifacts, which would inflate parse_errors (and potentially trigger warnings/failures) even when bot-comment auth coverage artifacts are fine. Consider tightening the matcher to only include files whose path/name includes bot-comment-auth-coverage- (or another unique prefix), and drop the generic basename checks (or scope them under a bot-comment-auth-coverage-* directory).

Suggested change

	const basename = path.basename(normalized);
	if (!normalized.endsWith('.json')) return false;
	return normalized.includes('/bot-comment-auth-coverage-wrapper-') ||
	normalized.includes('/bot-comment-auth-coverage-reusable-') ||
	basename === 'wrapper.json' ||
	basename === 'reusable.json';
	if (!normalized.endsWith('.json')) return false;
	if (!normalized.includes('bot-comment-auth-coverage-')) return false;
	return normalized.includes('/bot-comment-auth-coverage-wrapper-') ||
	normalized.includes('/bot-comment-auth-coverage-reusable-');