feat(ci): add issue and PR management automation

Import issue/PR housekeeping workflows adapted from NVIDIA/aicr:

- triage: label new issues needs-triage, infer component/* labels from the
  Component dropdown, conventional-commit scope, and title/body text
- labeler: path-based component/* and doc labels on PRs
- welcome: greet first-time issue and PR authors
- lock-threads: lock issues/PRs closed for 90+ days
- inactive-pr-reminder: nudge PRs idle 14-29 days before the stale bot

Migrate issue taxonomy to native GitHub Issue Types: the bug and feature
forms now set the Bug/Enhancement type instead of a label, gain a
multi-select Component dropdown, and the bug/feature/epic/task/initiative
labels are retired. Add needs-triage plus component/ci and component/tests
with distinct hues, and drop the dead P0 exemption from the stale workflow.

All external actions (actions/github-script, actions/labeler) match the
SHAs already allowlisted for the org.

Signed-off-by: Brian Lockwood <lockwobr@gmail.com>

Author: lockwobr

.github/ISSUE_TEMPLATE/bug_report_form.yml

@@ -17,7 +17,8 @@
 name: Bug Report
 description: File a bug report for Skyhook
 title: "[BUG]: "
-labels: ["bug"]
+type: Bug
+labels: ["needs-triage"]
 
 body:
   - type: markdown
@@ -55,6 +56,24 @@ body:
     validations:
       required: true
 
+  - type: dropdown
+    id: component
+    attributes:
+      label: Component
+      description: Which part(s) of the project are affected? Select all that apply; this helps us route the issue.
+      multiple: true
+      options:
+        - Operator (controller-manager)
+        - Agent (package executor)
+        - Helm chart
+        - CLI (kubectl-skyhook)
+        - CI / tooling
+        - Tests (e2e / chainsaw)
+        - Docs / examples
+        - Other / Unknown
+    validations:
+      required: true
+
   - type: textarea
     id: description
     attributes:
@@ -94,9 +113,9 @@ body:
     id: terms
     attributes:
       label: Code of Conduct
-      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/NVIDIA/skyhook/blob/main/CODE_OF_CONDUCT.md).
+      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/NVIDIA/nodewright/blob/main/CODE_OF_CONDUCT.md).
       options:
         - label: I agree to follow Skyhook's Code of Conduct
           required: true
-        - label: I have searched the [open bugs](https://github.com/NVIDIA/skyhook/issues?q=is%3Aopen+is%3Aissue+label%3Abug) and have found no duplicates for this bug report
+        - label: I have searched the [open bugs](https://github.com/NVIDIA/nodewright/issues?q=is%3Aopen+is%3Aissue+type%3ABug) and have found no duplicates for this bug report
           required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -18,7 +18,7 @@ blank_issues_enabled: true
 
 contact_links:
   - name: Ask a Question
-    url: https://github.com/NVIDIA/skyhook/discussions
+    url: https://github.com/NVIDIA/nodewright/discussions
     about: Please ask any questions here.
   - name: Report a Security Vulnerability
     url: https://www.nvidia.com/object/submit-security-vulnerability.html

.github/ISSUE_TEMPLATE/feature_request_form.yml

@@ -18,7 +18,8 @@
 name: Feature Request
 description: Request new or improved functionality
 title: "[FEA]: "
-labels: ["feature"]
+type: Enhancement
+labels: ["needs-triage"]
 
 body:
   - type: markdown
@@ -49,6 +50,24 @@ body:
     validations:
       required: true
 
+  - type: dropdown
+    id: component
+    attributes:
+      label: Component
+      description: Which part(s) of the project would this affect? Select all that apply; this helps us route the request.
+      multiple: true
+      options:
+        - Operator (controller-manager)
+        - Agent (package executor)
+        - Helm chart
+        - CLI (kubectl-skyhook)
+        - CI / tooling
+        - Tests (e2e / chainsaw)
+        - Docs / examples
+        - Other / Unknown
+    validations:
+      required: true
+
   - type: textarea
     id: problem
     attributes:
@@ -91,9 +110,9 @@ body:
     id: terms
     attributes:
       label: Code of Conduct
-      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/NVIDIA/skyhook/blob/main/CODE_OF_CONDUCT.md).
+      description: By submitting this issue, you agree to follow our [Code of Conduct](https://github.com/NVIDIA/nodewright/blob/main/CODE_OF_CONDUCT.md).
       options:
         - label: I agree to follow Skyhook's Code of Conduct
           required: true
-        - label: I have searched the [open feature requests](https://github.com/NVIDIA/skyhook/issues?q=is%3Aopen+is%3Aissue+label%3A%22feature+request%22) and have found no duplicates for this feature request
+        - label: I have searched the [open feature requests](https://github.com/NVIDIA/nodewright/issues?q=is%3Aopen+is%3Aissue+type%3AEnhancement) and have found no duplicates for this feature request
           required: true

.github/labeler.yml

@@ -0,0 +1,65 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Path-based PR labels for actions/labeler. Kept in sync with the component/*
+# label family in .github/labels.yml and the triage keyword maps in
+# .github/workflows/triage.yaml.
+
+# Operator (controller-manager), excluding the CLI which lives under it.
+component/operator:
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'operator/**'
+      - all-globs-to-all-files:
+          - '!operator/cmd/cli/**'
+
+component/cli:
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'operator/cmd/cli/**'
+
+component/agent:
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'agent/**'
+
+component/chart:
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'chart/**'
+
+component/ci:
+  - changed-files:
+      - any-glob-to-any-file:
+          - '.github/**'
+          - 'scripts/**'
+          - '.gitlab-ci.yml'
+          - '**/Makefile'
+          - '**/*.mk'
+      # Don't let vendored third-party Makefiles trip the CI label.
+      - all-globs-to-all-files:
+          - '!**/vendor/**'
+
+component/tests:
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'k8s-tests/**'
+
+doc:
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'docs/**'
+          - '**/*.md'

.github/labels.yml

@@ -19,83 +19,58 @@
 # Sync to GitHub with: make labels
 #
 # Label categories:
-#   Issue types  — applied automatically by issue templates
-#   Component    — which part of the project is affected
-#   Planning     — applied by engineering/product during triage (per DGXC OSS Policy)
-#   Priority     — P0/P1/P2 per DGXC OSS Policy, applied by engineering
-#   Lifecycle    — stale automation and freeze exemptions
-#   Standard     — common GitHub labels
-
-# ── Issue Types ───────────────────────────────────────────────────────────────
-# Applied automatically by issue templates
-
-- name: "bug"
-  color: "d73a4a"
-  description: "Something isn't working"
-
-- name: "feature request"
-  color: "a2eeef"
-  description: "New feature or improvement to existing functionality"
+#   Type:      issue Type (Bug/Enhancement/Documentation/Task/Epic/Initiative) is
+#              a native GitHub Issue Type set by the org, not a label
+#   Triage:    needs-triage, cleared once a maintainer triages
+#   Component: which part of the project is affected
+#   Lifecycle: stale automation and freeze exemptions
+#   Standard:  common GitHub labels
+
+# ── Type ──────────────────────────────────────────────────────────────────────
+# Bug / Enhancement / Documentation / Task / Epic / Initiative are native GitHub
+# Issue Types (org-level), assigned by the issue forms via their `type:` key, not
+# labels. `doc` stays as a label because the PR path labeler applies it to
+# docs-only PRs (issues use the Documentation type instead).
 
 - name: "doc"
   color: "0075ca"
-  description: "Documentation addition, correction, or improvement"
+  description: "Documentation change (PR path label; doc issues use the Documentation type)"
+
+# ── Triage ───────────────────────────────────────────────────────────────────
+# Applied automatically to new issues; removed once a maintainer triages.
+
+- name: "needs-triage"
+  color: "fbca04"
+  description: "Awaiting initial triage by a maintainer"
 
 # ── Component ────────────────────────────────────────────────────────────────
-# Which part of the project is affected
+# Which part of the project is affected. Applied automatically by issue triage
+# and PR path labeling. Each component gets a distinct hue so they pop apart at
+# a glance; the "component/" prefix keeps them grouped in label lists.
 
 - name: "component/operator"
-  color: "1d76db"
+  color: "0969da"
   description: "Skyhook operator (controller-manager)"
 
 - name: "component/agent"
-  color: "1d76db"
+  color: "1a7f37"
   description: "Skyhook agent (package executor)"
 
 - name: "component/chart"
-  color: "1d76db"
+  color: "8250df"
   description: "Helm chart"
 
 - name: "component/cli"
-  color: "1d76db"
+  color: "bc4c00"
   description: "kubectl-skyhook CLI plugin"
 
-# ── Planning Types ────────────────────────────────────────────────────────────
-# Applied by engineering/product during triage (DGXC OSS Policy issue types)
-
-- name: "epic"
-  color: "7057ff"
-  description: "Roadmap feature — large body of work spanning multiple issues"
-
-- name: "feature"
-  color: "a2eeef"
-  description: "Goal of a feature request or enhancement (planning label)"
-
-- name: "task"
-  color: "e4e669"
-  description: "Sub-task of a feature or epic"
-
-- name: "initiative"
-  color: "f9d0c4"
-  description: "Container for a group of related features (optional)"
-
-# ── Priority ─────────────────────────────────────────────────────────────────
-# Set by engineering only. SLAs per DGXC OSS Policy:
-#   P0: major functionality broken, no workaround — 30 day fix SLA
-#   P1: product works but not as expected, workaround exists — 6 month SLA
-#   P2: minor defect, minor impact — no fix commitment
-
-- name: "P0"
-  color: "b60205"
-  description: "Critical: major functionality broken, no workaround. 30-day SLA."
-
-- name: "P1"
-  color: "e11d48"
-  description: "High: product works but not as expected. Workaround exists. 6-month SLA."
+- name: "component/ci"
+  color: "bf3989"
+  description: "CI workflows, GitHub Actions, and repo tooling"
 
-- name: "P2"
-  color: "f97316"
-  description: "Medium: minor defect or minor impact. No fix commitment."
+- name: "component/tests"
+  color: "9a6700"
+  description: "End-to-end / chainsaw test suites (k8s-tests)"
 
 # ── Lifecycle ─────────────────────────────────────────────────────────────────
 # Used by stale automation

.github/workflows/inactive-pr-reminder.yaml

@@ -0,0 +1,84 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: Inactive PR Reminder
+
+on:
+  schedule:
+    - cron: '0 7 * * *'  # daily at 07:00 UTC
+  workflow_dispatch: {}
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}
+
+jobs:
+
+  remind:
+    name: Nudge Inactive PRs
+    if: github.repository == 'NVIDIA/nodewright'
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+    timeout-minutes: 10
+    steps:
+      - name: Check for inactive PRs
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3  # v9.0.0
+        with:
+          script: |
+            const now = new Date();
+            const msPerDay = 86400000;
+            const skipLabels = ['lifecycle/frozen', 'do-not-merge'];
+
+            const { data: prs } = await github.rest.pulls.list({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              state: 'open',
+              sort: 'updated',
+              direction: 'asc',
+              per_page: 100,
+            });
+
+            for (const pr of prs) {
+              // Skip PRs explicitly held open or parked.
+              if (pr.labels.some(l => skipLabels.includes(l.name))) continue;
+
+              const updated = new Date(pr.updated_at);
+              const daysInactive = Math.floor((now - updated) / msPerDay);
+
+              // Target the 14–29 day window, before the stale bot fires at 30.
+              if (daysInactive < 14 || daysInactive >= 30) continue;
+
+              // Don't double-remind: skip if a bot already left a reminder.
+              const { data: comments } = await github.rest.issues.listComments({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: pr.number,
+              });
+              const alreadyReminded = comments.some(c =>
+                c.user.type === 'Bot' && c.body.includes('inactive for')
+              );
+              if (alreadyReminded) continue;
+
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: pr.number,
+                body: `@${pr.user.login} this PR has been inactive for ${daysInactive} days. Do you need help finishing it, or should we close it for now? Feel free to reopen anytime.`,
+              });
+            }