feat: automate versioned CLI command documentation scaffolding and changelog engine #18

	name: Bot - On PR Update

	# Runs on new commits (synchronize) and PR body edits (edited). Performs all
	# 4 checks (DCO, GPG, merge conflict, issue link), posts/updates unified
	# comment, and conditionally swaps the status label via bot-on-pr-update.cjs.
	# For edited events, exits early if only title/base changed.
	on:
	pull_request_target:
	types:
	- synchronize
	- edited

	permissions:
	contents: read
	pull-requests: write
	checks: write

	jobs:
	on-pr-update:
	runs-on: ubuntu-latest
	timeout-minutes: 10
	if: github.event.pull_request.draft == false

	concurrency:
	group: pr-bot-${{ github.event.pull_request.number }}
	cancel-in-progress: false

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@9ca718d3bf646d6534007c269a635b3e54cadf99 # v2.19.2
	with:
	egress-policy: audit

	- name: Checkout Repository
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- name: Run Bot
	uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
	with:
	script: \|
	const script = require('./.github/scripts/bot-on-pr-update.cjs');
	await script({ github, context });

Provide feedback