fix(labels): align workflows and Dependabot with the new label scheme

[Wassim Chegham (manekinekko)]

Summary

Update repository automation to use the labels now configured in microsoft/scope.

• Use type: worker-update for both version-checker issue lookup/creation and the upgrade workflow's exact-match guard.
• Use type: automation and topic: testing in Test Improver outputs and its issue/monthly-summary searches.
• Use the restored agentic-workflows system label for daily repository status reports, replacing the retired report and daily-status labels.
• Regenerate the three executable workflows with their existing compiler versions: v0.57.1, v0.60.0, and v0.63.0. Keep existing UTC schedules explicit so recompilation does not reschedule jobs. Action SHAs, permissions, triggers, and job dependencies are unchanged.
• Add explicit Dependabot labels for the root pnpm workspace, website, and Rust gateway. Every entry has open-pull-requests-limit: 0; this does not enable version-update PRs or change repository security-update settings.
• Document label conventions and replace the proposed waiting-on-author convention with status: waiting, retaining the distinction between waiting on a contributor and waiting on the team.

Demos

N/A. Workflow configuration and documentation only; no Portal or CLI UI changes.

Before

N/A. Automations referenced labels that had been renamed or removed.

After

N/A. Workflow labels match the live inventory, with the Agentic Workflows system-label exception documented.

Testing

• Compiled each Markdown workflow using its original compiler version; all three compile successfully. The compilers warn about fixed daily schedules, which intentionally preserve the existing execution times.
• Recompiled a second time and compared checksums: all generated workflow files and action pins were identical.
• Eight session-local configuration validation tests passed, covering source/generated/live label agreement, seven positive/negative worker-label guard cases, unchanged triggers/schedules/permissions/action pins, prompt search updates, Dependabot JSON Schema validation, package-directory coverage, and disabled version-update PRs.
• Ran actionlint v1.7.12 against all four changed executable workflows. The three generated workflows pass. check-worker-versions.yml:14 has a pre-existing empty choice (- "") diagnostic, reproduced against the unchanged baseline and left outside this PR's scope.
• git diff --check passed.
• No live workflow dispatches or label/settings mutations were performed.

Documentation and compatibility

Updated CONTRIBUTING.md with exact automation label dependencies, compiler versions, Dependabot policy, and the required agentic-workflows system-label exception.

The pinned upstream runtimes hard-code agentic-workflows for failure/no-op lookups and PR fallback issues. This also remains hard-coded in the latest runtime inspected, so this PR does not introduce an unrelated runtime upgrade or disable reporting. The user restored the label during preparation; it exists and covers nine issues. Maintainers should preserve it on tracking issues until upstream supports a replacement for both reads and writes.

This PR does not create, delete, rename, or backfill live labels. External GitHub Apps, webhooks, and GitHub Projects rules remain outside the checked-in configuration audit.

Checklist

• Documentation updated for the label conventions and compatibility exception.
• Generated workflows rebuilt from their Markdown sources.
• Existing runtime pins, permissions, triggers, and schedules preserved.
• N/A: no Portal or CLI feature/component changes.
• N/A: no database migrations or application dependency changes.
• N/A: no user-visible behavior requiring a demo recording.

[Copilot]

Copilot review overview

🟢 Approval recommended

No unresolved review issues were identified, and all approval assessments are positive.

Review effort: Lite
Findings: None

What changed in this PR

Updates repository automation, Dependabot configuration, and documentation to match the new label scheme while preserving workflow behavior.

Changes:

• Updated automation labels and regenerated workflow lockfiles.
• Added disabled, explicitly labeled Dependabot configurations.
• Documented label conventions and workflow maintenance requirements.

File	Summary
CONTRIBUTING.md	Documents label conventions and workflow maintenance.
.github/​workflows/​worker-version-upgrade.md	Updates worker label filtering.
.github/​workflows/​worker-version-upgrade.lock.yml	Regenerated worker workflow.
.github/​workflows/​daily-test-improver.md	Updates Test Improver labels and searches.
.github/​workflows/​daily-test-improver.lock.yml	Regenerated Test Improver workflow.
.github/​workflows/​daily-repo-status.md	Updates status-report labeling.
.github/​workflows/​daily-repo-status.lock.yml	Regenerated status workflow.
.github/​workflows/​check-worker-versions.yml	Updates worker issue labels.
.github/​dependabot.yml	Adds disabled, labeled Dependabot configurations.
.github/​aw/​actions-lock.json	Pins the required compiler action.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.