[DO NOT MERGE] Migrate to the shared automation-template.yml entry point

[rtibblesbot]

Summary

Seven caller workflows each carried their own on: block and its own exhaustive types: list, so toggling any automation meant a change in every consumer repo, and the hand-maintained lists drifted. One unedited copy of automation-template.yml replaces all seven, moving routing into the central reusable automation.yml. No leaf automation's behaviour changes. This repo gains good-first-issue-comment and resolve-bot-pr-threads, per the upstream design.

References

Closes #238.
Blocked by: learningequality/.github#88.

Reviewer guidance

The copy is byte-identical to upstream blob 3208db2 on the #88 branch (git hash-object to check). Two lint drifts found while copying were fixed upstream instead of locally — yamlfmt v0.16.0 stripping the blank line after the header (comment, fixed in b3bbf69) and the missing inline # zizmor: ignore[dangerous-triggers] (comment, fixed in 5c97f47). All hooks pass.

Two things the diff does not explain on its own:

• The template adds a permissions: block that no caller had. Not a narrowing — every leaf job in upstream automation.yml declares its own permissions, all subsets of contents: write + pull-requests: write, and issue writes use the bot app token rather than GITHUB_TOKEN.
• Secret parity is exact: the seven the template passes are the seven the deleted callers passed, so LE_BOT_APP_ID and LE_BOT_PRIVATE_KEY resolve as they do today.

Post-merge, against main:

1. Open a draft pull request — the contributor reply and the spreadsheet update run.
2. Add then remove help wanted on a test issue — the header updates both times.
3. Assign then unassign a test issue — the community contribution label follows.
4. Comment on a test issue from a contributor account — the Slack notification is sent.
5. Run Automation from the Actions tab — only unassign-inactive-issues runs.

Open acceptance criteria

Criterion	Why it is still open
.github/workflows/automation.yml is an unedited copy of automation-template.yml from learningequality/.github@main	The template is not on main yet. Copied verbatim from the #88 branch; re-synced from main immediately before merge.
This pull request is merged only after learningequality/.github#88	#88 is open.
After merge, each of these fires the automation it fired before	automation.yml@main does not exist until #88 merges, so nothing can run yet.
The weekly unassign-inactive-issues run still fires on Mondays at 00:01 UTC	Same gate — the first scheduled run is observable only after merge.

AI usage

Used Claude Code to inspect the seven callers, fetch the template verbatim, and diff its trigger set against theirs. Verified with the full test suite, prek, and actionlint.

🤖 Generated with Claude Code

---

@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly

How was this generated?

• Ran pre-flight CI checks (lint, format, tests) and verified all pass
• Rebased onto the target branch and resolved any conflicts
• Reorganized commit history into clean, logical commits
• Audited the diff to ensure only issue-relevant files are changed
• Built PR body from the repository's PR template with evidence blocks

🟡 Waiting for feedback Last updated: 2026-09-16 14:38 UTC