Port rebuild workflow

[mbg]

Ports a (slightly modified) version of the rebuild workflow from the CodeQL Action, since we have the same use case here that the JS in the dist directory needs to be rebuilt and checked into the repository when there are changes to the TypeScript code or its dependencies. This doesn't automatically happen for e.g. Dependabot PRs, so we have this workflow to rebuild the bundled JS when a specific label is added to a PR.

[Copilot]

⚠️ Not ready to approve

The new workflow has reliability/maintainability issues (hard-coded repository in gh commands and missing same-repo gating for label-triggered runs) that can cause failures or make the workflow non-reusable.

Pull request overview

This PR adds a GitHub Actions workflow to rebuild and commit the generated dist JavaScript when a PR is labeled (or manually dispatched), targeting cases like Dependabot where rebuilds don’t happen automatically.

Changes:

• Introduces a rebuild workflow triggered on PR label events and workflow_dispatch.
• Checks out the PR branch, merges the base branch (allowing dist/ conflicts), runs npm ci + lint/build, then commits/pushes any rebuild output.
• Uses GitHub CLI to remove the triggering label and to comment/update PR draft state after pushing.

File summaries

File	Description
.github/workflows/rebuild.yml	Adds a label-driven rebuild-and-push workflow for generated dist artifacts.

Copilot's findings

• Files reviewed: 1/1 changed files
• Comments generated: 6

Note

Your feedback helps us improve the quality of this feature.
Please use 👍 or 👎 to tell us whether this assessment is correct.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[henrymercer]

Nice. Will you open a separate PR to pin the rest of the Actions in this repo?

[henrymercer]

Pin to v7 rather than v6?