Suggested enhancement
The requirement is to create the required CI boilerplate code that will be able to check out public:development and public:restricted branches, for each of the repositories, and merge but not commit the result in an internal to the CI branch.
Ideally the desigin should checkout the code using groovy, and then invoke the script created by Mbed-TLS/mbedtls-framework#240. If the merge has failed, it should capture the output and email it to the team.
The job should run on a nightly basis.
Justification
Mbed TLS needs this because it improves our testing coverage and will greatly reduce the complexity of making a release