chore(ci): add Storybook frameworks sync workflow and checker script (#436)

* chore(ci): simplify storybook sync workflow script

* chore(ci): execute commands with args

* chore(ci): feed opencode prompt via markdown

* chore(ci): move opencode prompt template to markdown

* chore(ci): format sync script

* chore(ci): guard github actions env usage

Author: fi3ework

.github/workflows/storybook-frameworks-sync.yml

@@ -0,0 +1,67 @@
+name: Storybook Frameworks Sync
+
+on:
+  schedule:
+    - cron: "0 8 * * *"
+  workflow_dispatch:
+    inputs:
+      lookback_hours:
+        description: Lookback window in hours
+        required: false
+        default: "36"
+
+jobs:
+  sync:
+    runs-on: ubuntu-latest
+    environment: opencode
+    permissions:
+      contents: read
+      actions: write
+    env:
+      STORYBOOK_SYNC_CHECK_LAST_SHA: ${{ vars.STORYBOOK_SYNC_CHECK_LAST_SHA }}
+      STORYBOOK_SYNC_LOOKBACK_HOURS: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.lookback_hours || '36' }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 1
+
+      - name: Install pnpm
+        run: |
+          npm install -g corepack@latest --force
+          corepack enable
+
+      - name: Setup Node.js
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        with:
+          node-version: 20.x
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Install OpenCode
+        run: |
+          curl -fsSL https://opencode.ai/install | bash
+          echo "$HOME/.opencode/bin" >> "$GITHUB_PATH"
+
+      - name: Scan Storybook framework src commits
+        id: storybook-sync
+        env:
+          OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}
+          OPENCODE_PERMISSION: |
+            {
+              "bash": {
+                "*": "deny"
+              },
+              "webfetch": "deny"
+            }
+        run: pnpm exec tsx scripts/ci/storybook-frameworks-sync.mts
+
+      - name: Update last checked SHA
+        if: github.event_name == 'schedule' && steps.storybook-sync.outputs.next_head_sha != ''
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh variable set STORYBOOK_SYNC_CHECK_LAST_SHA --repo "${{ github.repository }}" --body "${{ steps.storybook-sync.outputs.next_head_sha }}"