Auto-rebuild dist files for Dependabot npm PRs

[Copilot]

Dependabot updates package.json/package-lock.json but doesn't rebuild dist files, causing CI to fail when it checks for drift between source and built artifacts.

Changes

Added .github/workflows/dependabot-rebuild.yml that:

• Triggers via workflow_run after JavaScript CI fails on a PR
• Verifies PR author is dependabot[bot] using gh pr view
• Runs npm ci && npm run build for all 9 JS packages
• Commits rebuilt dist files back to the PR branch using appauth

Implementation Notes

• Uses workflow_run event to gain write permissions (Dependabot PRs have read-only GITHUB_TOKEN)
• Leverages existing appauth action with ENVOY_CI_PUBLISH_APP_ID/ENVOY_CI_PUBLISH_APP_KEY secrets
• Only commits when git status --porcelain shows changes
• Filters to same-repo PRs only (excludes forks)

on:
  workflow_run:
    workflows:
    - JavaScript CI
    types:
    - completed

Original prompt

#3452 fails because dependabot doesnt know how to rebuild the dist files

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[netlify]

✅ Deploy Preview for nifty-bassi-e26446 ready!

Name	Link
🔨 Latest commit	d8d8105
🔍 Latest deploy log	https://app.netlify.com/projects/nifty-bassi-e26446/deploys/696647619226f700081582ce
😎 Deploy Preview	https://deploy-preview-3455--nifty-bassi-e26446.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.