ci: sync with netresearch/.github templates/go-app (#568)

Auto-opened by sync-template.sh. Brings this repo back into alignment
with the canonical `go-app` template in `netresearch/.github`.

To keep any diverging files, add their paths to
`.github/template.yaml`'s `intentional-drift:` list before merging —
otherwise the next sync run will revert them.

Author: CybotTM

.github/dependabot.yml

@@ -1,25 +1,31 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for more information:
-# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
-# https://containers.dev/guide/dependabot
-
 version: 2
 updates:
-  - package-ecosystem: "devcontainers"
-    directory: "/"
-    schedule:
-      interval: weekly
-  - package-ecosystem: "gomod"
-    directory: "/"
+  - package-ecosystem: gomod
+    directory: /
     schedule:
       interval: weekly
+      day: monday
+    open-pull-requests-limit: 10
+    groups:
+      go-dependencies:
+        patterns: ['*']
 
   - package-ecosystem: github-actions
     directory: /
     schedule:
       interval: weekly
+      day: monday
+    open-pull-requests-limit: 5
     groups:
       github-actions:
-        patterns:
-          - "*"
+        patterns: ['*']
+
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: weekly
+      day: monday
+    open-pull-requests-limit: 3
+    groups:
+      docker:
+        patterns: ['*']

.github/labeler.yml

@@ -0,0 +1,12 @@
+documentation:
+  - changed-files:
+      - any-glob-to-any-file: ['**/*.md', 'docs/**/*']
+ci:
+  - changed-files:
+      - any-glob-to-any-file: ['.github/**/*']
+dependencies:
+  - changed-files:
+      - any-glob-to-any-file: ['go.mod', 'go.sum']
+tests:
+  - changed-files:
+      - any-glob-to-any-file: ['**/*_test.go', 'testdata/**/*']

.github/template.yaml

@@ -0,0 +1,8 @@
+# Managed by netresearch/.github/templates/
+# Drift from the template is blocking CI in this repo (check-template-drift.yml).
+# Record explicit exceptions under intentional-drift[] to unblock.
+template: go-app
+intentional-drift:
+- path: .github/workflows/container.yml
+  reason: "GHCR package name is 'ofelia' (short form), not 'netresearch/ofelia' \u2014\
+    \ pre-dates template; renaming would break existing image consumers."

.github/workflows/auto-merge.yml .github/workflows/auto-merge-deps.yml.github/workflows/auto-merge.yml renamed to .github/workflows/auto-merge-deps.yml

@@ -0,0 +1,17 @@
+name: Template Drift
+
+on:
+  pull_request:
+    branches: [main]
+  push:
+    branches: [main]
+
+permissions: {}
+
+jobs:
+  drift:
+    uses: netresearch/.github/.github/workflows/check-template-drift.yml@main
+    with:
+      template: go-app
+    permissions:
+      contents: read