[CI] Optimize workflow triggers, permissions, and environment control

- Refine CI triggers: skip CI for Draft PRs, but trigger tests when
  transitioning to ready_for_review.
- Add read permissions for `contents` and `pull-requests`.
- Add environment cleanup step before FlagTree build.
- Add conditional cache clearing step based on `ClearCache:<backend>`
  label before testing.

Signed-off-by: Liu Haoyu <liuhaoyutz@126.com>

Author: liuhaoyutz

.github/workflows/aipu3.3-build-and-test.yml

@@ -5,6 +5,11 @@ on:
     branches: [ "triton_v3.3.x" ]
   pull_request:
     branches: [ "triton_v3.3.x" ]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+permissions:
+  contents: read
+  pull-requests: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -13,7 +18,7 @@ concurrency:
 jobs:
   aipu-build-and-test:
     runs-on: aipu3.3
-    if: ${{ github.repository == 'FlagTree/flagtree' || github.repository == 'flagos-ai/flagtree' }}
+    if: ${{ github.repository == 'flagos-ai/flagtree' && github.event.pull_request.draft == false }}
     steps:
       - name: Setup environment
         shell: bash
@@ -32,6 +37,10 @@ jobs:
         with:
           backend: aipu
 
+      - name: Cleanup FlagTree Environment
+        if: steps.check_backend.outputs.should_skip != 'true'
+        uses: flagos-ai/FlagTree/.github/actions/cleanup-flagtree-env@main
+
       - name: FlagTree Build on AIPU
         if: steps.check_backend.outputs.should_skip != 'true'
         shell: bash
@@ -43,6 +52,14 @@ jobs:
           cd python
           MAX_JOBS=32 python3.10 -m pip install . --no-build-isolation
 
+      - name: Clear cache if ClearCache label present
+        if: steps.check_backend.outputs.should_skip != 'true'
+        id: clear_cache
+        uses: flagos-ai/FlagTree/.github/actions/clear-cache-if-labeled@main
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          backend: aipu
+
       - name: FlagTree Test on AIPU
         if: steps.check_backend.outputs.should_skip != 'true'
         shell: bash

.github/workflows/code-format-check.yml

@@ -7,6 +7,7 @@ on:
     branches: [ "main", "triton_v3.2.x", "triton_v3.3.x", "triton_v3.4.x", "triton_v3.5.x"]
   pull_request:
     branches: [ "main", "triton_v3.2.x", "triton_v3.3.x", "triton_v3.4.x", "triton_v3.5.x"]
+    types: [opened, synchronize, reopened, ready_for_review]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}

.github/workflows/enflame3.3-gcu300-build-and-test.yml

@@ -5,6 +5,11 @@ on:
     branches: [ "triton_v3.3.x" ]
   pull_request:
     branches: [ "triton_v3.3.x"]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+permissions:
+  contents: read
+  pull-requests: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -13,7 +18,7 @@ concurrency:
 jobs:
   enflame-build-and-test:
     runs-on: enflame3.3-gcu300
-    if: ${{ github.repository == 'FlagTree/flagtree' || github.repository == 'flagos-ai/flagtree' }}
+    if: ${{ github.repository == 'flagos-ai/flagtree' && github.event.pull_request.draft == false }}
     steps:
       - name: Setup environment
         shell: bash
@@ -32,6 +37,10 @@ jobs:
         with:
           backend: enflame
 
+      - name: Cleanup FlagTree Environment
+        if: steps.check_backend.outputs.should_skip != 'true'
+        uses: flagos-ai/FlagTree/.github/actions/cleanup-flagtree-env@main
+
       - name: Detect Target Branch
         shell: bash
         run: |
@@ -55,6 +64,14 @@ jobs:
           cd python
           MAX_JOBS=32 python3 -m pip install . --no-build-isolation
 
+      - name: Clear cache if ClearCache label present
+        if: steps.check_backend.outputs.should_skip != 'true'
+        id: clear_cache
+        uses: flagos-ai/FlagTree/.github/actions/clear-cache-if-labeled@main
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          backend: enflame
+
       - name: FlagTree Test on Enflame
         if: steps.check_backend.outputs.should_skip != 'true'
         shell: bash

.github/workflows/nv3.3-build-and-test.yml

@@ -7,6 +7,11 @@ on:
     branches: [ "main", "triton_v3.2.x", "triton_v3.3.x" ]
   pull_request:
     branches: [ "main", "triton_v3.2.x", "triton_v3.3.x" ]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+permissions:
+  contents: read
+  pull-requests: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -15,7 +20,7 @@ concurrency:
 jobs:
   nv-build-and-test:
     runs-on: nvidia3.3
-    if: ${{ github.repository == 'FlagTree/flagtree' || github.repository == 'flagos-ai/flagtree' }}
+    if: ${{ github.repository == 'flagos-ai/flagtree' && github.event.pull_request.draft == false }}
     steps:
       - name: Setup environment
         shell: bash
@@ -34,6 +39,10 @@ jobs:
         with:
           backend: nvidia
 
+      - name: Cleanup FlagTree Environment
+        if: steps.check_backend.outputs.should_skip != 'true'
+        uses: flagos-ai/FlagTree/.github/actions/cleanup-flagtree-env@main
+
       - name: Detect Target Branch
         shell: bash
         run: |
@@ -76,6 +85,14 @@ jobs:
           cd python
           MAX_JOBS=32 python3 -m pip install . --no-build-isolation
 
+      - name: Clear cache if ClearCache label present
+        if: steps.check_backend.outputs.should_skip != 'true'
+        id: clear_cache
+        uses: flagos-ai/FlagTree/.github/actions/clear-cache-if-labeled@main
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          backend: nvidia
+
       - name: FlagTree Test on NVidia
         if: steps.check_backend.outputs.should_skip != 'true'
         shell: bash

.github/workflows/tsingmicro3.3-build-and-test.yml

@@ -5,6 +5,11 @@ on:
     branches: [ "triton_v3.3.x" ]
   pull_request:
     branches: [ "triton_v3.3.x" ]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+permissions:
+  contents: read
+  pull-requests: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
@@ -13,7 +18,7 @@ concurrency:
 jobs:
   tsingmicro-build-and-test:
     runs-on: tsingmicro3.3
-    if: ${{ github.repository == 'FlagTree/flagtree' || github.repository == 'flagos-ai/flagtree' }}
+    if: ${{ github.repository == 'flagos-ai/flagtree' && github.event.pull_request.draft == false }}
     steps:
       - name: Setup environment
         shell: bash
@@ -32,6 +37,10 @@ jobs:
         with:
           backend: tsingmicro
 
+      - name: Cleanup FlagTree Environment
+        if: steps.check_backend.outputs.should_skip != 'true'
+        uses: flagos-ai/FlagTree/.github/actions/cleanup-flagtree-env@main
+
       - name: FlagTree Build on Tsingmicro
         if: steps.check_backend.outputs.should_skip != 'true'
         shell: bash
@@ -49,6 +58,14 @@ jobs:
           cd python
           python3 -m pip install . --no-build-isolation
 
+      - name: Clear cache if ClearCache label present
+        if: steps.check_backend.outputs.should_skip != 'true'
+        id: clear_cache
+        uses: flagos-ai/FlagTree/.github/actions/clear-cache-if-labeled@main
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          backend: tsingmicro
+
       - name: FlagTree Test on Tsingmicro
         if: steps.check_backend.outputs.should_skip != 'true'
         shell: bash