ci(repo): add refresh-lock job and aggregator check-runs #863

	name: "Conventional commit PRs"

	on:
	pull_request_target:
	types:
	- opened
	- edited
	- reopened

	jobs:
	main:
	name: Validate PR title
	runs-on: ubuntu-latest
	permissions:
	pull-requests: read
	steps:
	- uses: amannn/action-semantic-pull-request@v5
	with:
	scopes: \|
	grz-common
	grz-cli
	grzctl
	grz-pydantic-models
	grz-pydantic-models-testing
	grz-db
	grz-tools
	grz-check
	repo
	release
	deps
	other
	requireScope: true
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	# Aggregator job: a single, stable check-run name to use as the required
	# status check in branch protection, independent of the underlying job name.
	conventional-commit-pr:
	name: Conventional commit PRs
	needs: [main]
	runs-on: ubuntu-latest
	if: always()
	steps:
	- name: Verify PR title validation did not fail
	run: \|
	# Fail only on failure/cancelled; a skipped run is allowed.
	result="${{ needs.main.result }}"
	if [ "$result" = "failure" ] \|\| [ "$result" = "cancelled" ]; then
	echo "PR title validation did not pass: $result"
	exit 1
	fi

Provide feedback