feat: add Update Changelogs workflow with auto-changelog v6 --checkDeps

[cryptodev-2s]

Explanation

Adds an Update Changelogs workflow that uses @metamask/auto-changelog v6's --checkDeps --fix feature to automatically validate and fix missing dependency bump changelog entries.

Triggers:

• Automatic: When a release PR (release/* branch) is opened targeting main
• On-demand: Comment @metamaskbot update-changelogs on any non-fork PR

What it does:

1. Detects and skips fork PRs (security)
2. Checks out the PR head branch
3. Runs changelog:validate --checkDeps --fix --currentPr <PR#> across all packages
4. Commits and pushes any CHANGELOG.md fixes back to the PR branch
5. Comments on the PR with the result

Security:

• Fork PRs are blocked via isCrossRepository check
• All dynamic values use environment variables (no ${{ }} in run: blocks)
• SHA-based checkout with branch name switch for release branch detection
• 30-minute job timeout

References

N/A

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Medium Risk
Adds a GitHub Actions workflow with contents: write that can commit/push changes to PR branches, so misconfiguration could unintentionally modify branches. Risk is mitigated by skipping fork PRs and scoping writes to **/CHANGELOG.md.

Overview
Adds a new GitHub Actions workflow (.github/workflows/update-changelogs.yml) to automatically validate and auto-fix missing dependency bump entries in package changelogs.

The workflow triggers on newly opened release/* PRs targeting main or when a commenter requests it via @metamaskbot update-changelogs, skips fork PRs, runs yarn ... changelog:validate --checkDeps --fix --currentPr, then commits and pushes any CHANGELOG.md updates back to the PR and comments the outcome.

^{Reviewed by Cursor Bugbot for commit f4aabbb. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit f4aabbb. Configure here.}