feat: add draft-segment-schema-pr action

[NicolasMassart]

Summary

• Adds a reusable draft-segment-schema-pr composite action that reads Mobile/Extension analytics diffs through the GitHub API, comments one proposal, and opens a draft Consensys/segment-schema PR after the author comments I agree to open a draft Segment schema PR.
• Client file list uses pulls.listFiles (three-dot PR comparison). Schema YAML is still committed and pushed with git. Helper, not a merge gate.
• Consumer workflows stay in Mobile/Extension; pin a commit SHA until @v1 exists.

Test plan

• yarn test and yarn lint on this branch
• Confirm propose posts or edits a single sticky proposal comment and does not comment on PRs with no analytics changes
• Confirm create opens a draft schema PR only after the author agreement comment on an open, same-repo PR
• Confirm later propose runs update the same bot branch when a schema PR is already open
• Confirm close closes the schema PR when the client PR closes unmerged, and leaves it open when merged

Made with Cursor

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	yaml@​2.9.0

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring alerts on:

• yaml@2.9.0

View full report

[NicolasMassart]

@SocketSecurity ignore npm/yaml@2.9.0

official parser; we only call parseDocument(text), no reviver/onAnchor.