ci: establish Stellar Wave maintainer automation

[dDevAhmed]

Summary

Freezes the audited maintainer baseline and switches Stellar Wave intake from manual coordination to bounded automation.

Included

• records the 2026-09-18 backlog conformance audit;
• confirms the 120-node dependency graph and contributor baseline;
• creates bounded Wave intake/dependency synchronization;
• creates /claim and /unclaim contributor assignment commands;
• validates linked issue ownership, dependencies, protected surfaces and overlapping source/core files on contributor PRs;
• adds stale contributor PR warnings/closure handling;
• aligns the PR template with Wave architecture and conflict expectations;
• bootstraps managed intake/status labels from a trusted main-branch workflow;
• keeps the initial ready pool bounded to 16 issues.

Testing

• audited SW-001 through SW-120 identity coverage;
• audited required labels across GitHub issues SW-001 — Add doctor output snapshot conformance tests #96 through SW-120 — Run Wave backlog conformance and final conflict audit #215;
• parsed the canonical dependency graph: 120 nodes, no missing IDs, no cycles;
• all third-party Actions are pinned to immutable full SHAs;
• workflows do not use pull_request_target;
• contributor PR guard is read-only;
• mutation workflows do not checkout or execute contributor code.

Security Impact

This PR adds maintainer automation with narrowly scoped GitHub token permissions. PR validation is read-only. Issue mutation is limited to issue/assignment state. Scheduled stale handling can comment/close PRs but does not execute PR code.

Release Impact

• No published/user-visible CLI behavior change
• Changeset not required; repository automation only

Closes #215

Maintainer audit owner: @dDevAhmed

Summary by CodeRabbit

• New Features

  • Added automated workflows for claiming and releasing eligible issues.
  • Added intake automation that tracks dependencies and manages issue readiness, blocking, and queue limits.
  • Added pull request validation for issue links, dependencies, assignments, protected files, testing, and security details.
  • Added stale pull request labeling, warnings, and closure after extended inactivity.

• Documentation

  • Added contributor guidance covering the Stellar Wave backlog, intake process, maintainer responsibilities, and automation labels.
  • Updated the pull request template with required checks and issue-linking guidance.

[coderabbitai]

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: db6bad17-3925-4ebd-86b3-49669194faf4

📥 Commits

Reviewing files that changed from the base of the PR and between fe99649 and 7d2e428.

📒 Files selected for processing (6)

• .github/PULL_REQUEST_TEMPLATE.md
• .github/workflows/wave-claim.yml
• .github/workflows/wave-intake.yml
• .github/workflows/wave-pr-guard.yml
• .github/workflows/wave-stale-prs.yml
• docs/contributing/wave-maintainer-baseline.md

 _____________________________________________________________________________________
< All idioms must be learned. Good idioms only need to be learned once. - Alan Cooper >
 -------------------------------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}