ci: add primer-api-review workflow

[joshblack]

Closes https://github.com/github/primer/issues/6975

This adds an experimental workflow that will use our new /style-guide skill to conduct an API review and create an issue with any findings. We're curious how this will behave as we flesh out the skill and what it will find in our project over time as we make changes.

Changelog

New

• Add new CI workflow for weekly API review of components

Changed

Removed

Rollout strategy

• None; if selected, include a brief description as to why

This is a change to our agentic workflows and is not a part of the public API

[changeset-bot]

⚠️ No Changeset found

Latest commit: df8a147

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[Copilot]

Pull request overview

This PR introduces a new Agentic Workflows-based CI workflow that periodically audits @primer/react component APIs against the repo’s style guide and keeps a single tracking issue (“Primer API Review”) up to date with unresolved findings.

Changes:

• Adds a new weekly + manually triggerable “Primer API Review” agentic workflow definition and its compiled lock workflow.
• Adds an agentic-workflows routing skill to help direct future gh-aw workflow work to the right upstream prompts.
• Updates the gh-aw actions lock metadata and adjusts .gitattributes handling for generated lock workflows.

Show a summary per file

File	Description
.github/workflows/primer-api-review.md	Defines the agentic workflow prompt/instructions and context-gathering step for weekly API reviews.
.github/workflows/primer-api-review.lock.yml	Adds the compiled GitHub Actions workflow that runs the agent, safe-outputs handling, and threat detection.
.github/skills/agentic-workflows/SKILL.md	Introduces a dispatcher skill for designing/debugging/upgrading gh-aw workflows using upstream prompt files.
.github/aw/actions-lock.json	Updates pinned gh-aw action metadata used for agentic workflow tooling.
.gitattributes	Tweaks attributes applied to generated *.lock.yml workflow files.

Review details

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

• Files reviewed: 4/5 changed files
• Comments generated: 1
• Review effort level: Lite

[joshblack]

@copilot update this to only run on workflow dispatch for now

[Copilot]

@copilot update this to only run on workflow dispatch for now

Updated in 4d9e9fd; the workflow now runs only via workflow_dispatch.