chore: workflows severely under-provisioned vs canonical tazama-lf/workflows

[Justus-at-Tazama]

Workflow drift and missing workflows against tazama-lf/workflows (dev)

An audit of .github/workflows on 2026-04-04 found the following discrepancies against the canonical source at tazama-lf/workflows.

This repo is severely under-provisioned — only milestone.yml and release.yml are present, and both are drifted.

⚠️ Drifted (file exists but content differs from canonical)

milestone.yml, release.yml

❌ Missing (in canonical, absent here)

codacy.yml, codeql.yml, conventional-commits.yml, dco-check.yml, dependency-review.yml, gpg-verify.yml, njsscan.yml, sbom.yml

Note: dockerfile-linter.yml and dockerhub-image-build.yml are likely not applicable to a docs repo — confirm and exclude from sync if so.

Remediation

1. Merge tazama-lf/workflows#24
2. Add this repo to the sync-workflows.yml target list in tazama-lf/workflows (excluding Docker-specific workflows)
3. Trigger sync to provision missing workflows and update drifted files

Identified by workflow audit dated 2026-04-04.