chore: make bot detection agentic

[mnkiefer]

• Removes the old bot detection YAML workflow (regular action).
• Adds new agentic workflow with a precompute job for gathering data on recent activity, scoring accounts based on risk factors, and maintaining a single triage issue for findings.
• Enhances reporting format with structured output for easier triage and action recommendations.

[Copilot]

Pull request overview

This PR migrates the legacy bot-detection GitHub Actions workflow from an inline actions/github-script implementation to an agentic workflow (.md source compiled into a .lock.yml) with a deterministic precompute phase and safe-outputs driven issue creation/updating.

Changes:

• Remove the legacy .github/workflows/bot-detection.yml workflow implementation.
• Add .github/workflows/bot-detection.md defining the agentic workflow prompt + deterministic precompute job and safe-outputs policy.
• Add the compiled .github/workflows/bot-detection.lock.yml produced by gh aw compile.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
.github/workflows/bot-detection.yml	Deletes the legacy hourly bot detection workflow.
.github/workflows/bot-detection.md	Adds the agentic workflow source: deterministic precompute (risk scoring + body rendering) and safe-outputs constraints.
.github/workflows/bot-detection.lock.yml	Adds the compiled workflow that executes the precompute + agent + safe-outputs pipeline.

Comments suppressed due to low confidence (1)

.github/workflows/bot-detection.md:327

• pulls.listFiles is paginated; requesting only per_page: 100 without pagination can miss sensitive-path touches when a PR changes >100 files. For the detector’s purpose, it’s important to either paginate (again with a deterministic cap) or otherwise ensure you don’t silently miss files beyond the first page.

                const filesResp = await github.rest.pulls.listFiles({
                  owner,
                  repo,
                  pull_number: it.number,
                  per_page: 100,
                });
                const filenames = (filesResp.data || []).map(f => f.filename);

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

@mnkiefer I've opened a new pull request, #15318, to work on those changes. Once the pull request is ready, I'll request review from you.

[mnkiefer]

@copilot Recompile workflow

[Copilot]

@mnkiefer I've opened a new pull request, #15326, to work on those changes. Once the pull request is ready, I'll request review from you.