feat: repoint all consumers off reusable-workflows to actions v8, then archive reusable-workflows

[devantler]

🤖 Generated by the Daily AI Assistant

Problem

#314 merged the reusable-workflow library INTO this repo (released v7.0.0 → v8.0.0), but the migration's consumer half is untracked and incomplete: 15 repos still pin devantler-tech/reusable-workflows/.github/workflows/*, so the legacy repo cannot be archived. Until it is, it keeps producing operational noise (its non-inert .sync-labels.yaml dot-template went permanently red nightly on 2026-07-03 — reusable-workflows#350) and blocks the docs repoint (devantler-tech/monorepo#1964).

Live consumer list (org code search, 2026-07-03):

Repo	Workflows pinning reusable-workflows
.github	cd.yaml, release.yaml
actions (this repo)	validate-go-project.yaml
agent-plugins	update-agent-skills.yaml
ascoachingogvaner	cd.yaml, release.yaml, template-sync.yaml
dotnet-template	publish.yaml, release.yaml, todos.yaml
gitops-tenant-template	cd.yaml, release.yaml, template-sync.yaml
go-template	release.yaml, todos.yaml
homebrew-tap	todos.yaml
ksail	ci.yaml, release.yaml, todos.yaml, update-skills.yaml
monorepo	ci.yaml, todos.yaml
platform	release.yaml, sync-cluster-policies.yaml, todos.yaml, update-skills.yaml
platform-template	release.yaml, template-sync.yaml, todos.yaml
wedding-app	cd.yaml, release.yaml, template-sync.yaml

Every referenced workflow has a 1:1 equivalent in this repo's .github/workflows/ at v8.0.0 (verified: create-release, deploy-github-pages, publish-app, publish-dotnet-library, publish-manifests, run-dotnet-tests, scan-for-todo-comments, sync-cluster-policies, template-sync, update-agent-skills, validate-go-project, delete-workflow-runs, dependency-review, enable-auto-merge, scan-for-workflow-vulnerabilities).

Proposal

1. Per consumer repo, one small ci: PR swapping devantler-tech/reusable-workflows/.github/workflows/<x>.yaml@<sha> # vN → devantler-tech/actions/.github/workflows/<x>.yaml@<v8.0.0 sha> # v8.0.0 (SHA-pinned, matching each repo's pin style). Batch a few repos per run; templates propagate onward via Template Sync.
2. Caveat: workflow-file PRs in Enable-Auto-Merge repos need DIRECT merge (the App token lacks workflows permission — see feat!: remove the sync-github-labels composite action (superseded by declarative IssueLabels) #418's auto-merge failure + Template Sync fails portfolio-wide: automation App lacks the Workflows permission .github#68).
3. When the org code search for devantler-tech/reusable-workflows in path:.github/workflows is clean, archive reusable-workflows (declaratively via devantler-tech/.github deploy/ Repository CR if supported, else maintainer one-click), which also kills reusable-workflows#350's nightly red and unblocks monorepo#1964.

Acceptance criteria

• Zero org code-search hits for devantler-tech/reusable-workflows under path:.github/workflows (outside the legacy repo itself)
• Each migrated workflow's first post-swap run is green on its repo
• reusable-workflows archived; monorepo#1964 unblocked

Size

M — mechanical but wide (15 repos, ~28 workflow files); a few repos per run over several runs.

[devantler]

🤖 Generated by the Daily AI Assistant

Consumer-list correction (uses:-anchored code search): two rows in the table above are false positives — actions' own hits are github.repository != guards inside the hosted workflow, and monorepo's ci.yaml hits are submodule paths. The true consumer set is 13 repos; monorepo pins only todos.yaml.

Batch 1 shipped (3 repos, 4 files, drafts):

• ci: repoint TODOs workflow to devantler-tech/actions v8.0.0 monorepo#2039 (todos.yaml)
• ci: repoint reusable workflows to devantler-tech/actions v8.0.0 go-template#139 (release.yaml + todos.yaml)
• ci: repoint TODOs workflow to devantler-tech/actions v8.0.0 homebrew-tap#1043 (todos.yaml)

Interface parity verified for scan-for-todo-comments.yaml + create-release.yaml at v8.0.0 (same APP_PRIVATE_KEY secret; new optional dry-run input only). Remaining: .github, agent-plugins, ascoachingogvaner, dotnet-template, gitops-tenant-template, ksail, platform, platform-template, wedding-app — parity-check each referenced workflow before swapping.

[devantler]

🤖 Generated by the Daily AI Assistant

Batch 2 shipped (2 repos, 3 files, drafts): devantler-tech/.github#80 (cd.yaml publish-manifests + release.yaml create-release), devantler-tech/agent-plugins#50 (update-agent-skills.yaml). Parity verified per workflow (only optional inputs added; oci-name/use-app-token/APP_PRIVATE_KEY unchanged).

Progress: 5/13 repos drafted. Remaining: ascoachingogvaner, dotnet-template, gitops-tenant-template, ksail, platform, platform-template, wedding-app.