[aafontoura]

Summary

• Add a weekly scheduled and manually dispatchable workflow using only the repository GITHUB_TOKEN with contents:read and issues:write.
• Compare upstream master with aafontoura/pytr hardened and maintain the labeled upstream-drift issue with commit details and security flags.
• Update and close the issue when the fork is in sync; never merge branches.

Verification

• actionlint and yamllint passed.
• DRY_RUN live public API check printed the issue body (29 commits behind, 8 ahead); no issue writes were made.

[aafontoura]

Accidentally opened in the upstream repository during fork PR setup. Closing; this change is intended for aafontoura/pytr.