Add AI repo co-maintainer agentic workflow (runs every 4 hours)

[Copilot]

Adds a GitHub Agentic Workflow (gh-aw) that acts as a periodic AI co-maintainer, helping triage issues, fix bugs via draft PRs, and propose codebase improvements — without ever merging anything itself.

New files

• .github/workflows/repo-co-maintainer.md — workflow definition (markdown + YAML frontmatter)
• .github/workflows/repo-co-maintainer.lock.yml — compiled GitHub Actions YAML (auto-generated by gh aw compile)

Workflow behaviour

• Trigger: every 4 hours (fuzzy-scattered cron) + workflow_dispatch
• Per run, three tasks (bounded to avoid over-acting):
  1. Issue triage — comment on up to 10 open issues: acknowledge bugs, answer questions, onboard contributors, ask for reproductions
  2. Bug fixes — implement surgical fixes for up to 2 issues per run, run dotnet test -c Release, open draft PRs, never self-merge
  3. Improvement proposals — identify one improvement (API usability, perf, docs, test coverage) and open a draft PR or tracking issue
• Persistent memory (cache-memory) — tracks which issues were commented on, which fixes were attempted, and what remains for future runs
• Constrained — no new dependencies, no breaking API changes, matches existing code style; always defers to human maintainers on judgement calls
• Safe outputs — write operations (comments, PRs, issues) go through safe-outputs jobs with minimal permissions; main job is read-only

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/actions/checkout/git/ref/tags/v5
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha (http block)
• https://api.github.com/repos/actions/github-script/git/ref/tags/v8
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha (http block)
• https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.2
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.2 --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.