The scheduled upstream sync workflow is currently failing on automatic merge conflicts, producing a persistent red check (sync, run job 83330418155). This change disables that job path while keeping the workflow definition in place for future re-enablement.

• Workflow behavior

  • Disabled jobs.sync in .github/workflows/sync-upstream.yml via a job-level guard so the failing automation no longer executes.

• Workflow security posture

  • Added explicit token permissions at workflow scope to avoid implicit defaults and tighten workflow configuration hygiene.

• Maintainability

  • Added an inline note documenting why the job is disabled (merge-conflict failures in unattended sync).

permissions:
  contents: write
  pull-requests: write

jobs:
  sync:
    # Disabled due to repeated merge-conflict failures in automation; run manually if needed.
    if: false