feat(ci): add work-in-progress label workflow for docs PRs (#24950)

* feat(ci): add workflow to manage work-in-progress label on PRs

Automatically adds a "work in progress" label when a PR is opened or
reopened, and removes it when a member or owner approves the PR.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(ci): replace work-in-progress with under_review label for docs PRs

Target only PRs that touch docs-owned paths (matching CODEOWNERS) so the
docs team isn't pinged until a Vector team member approves. The label is
auto-added on open/reopen and auto-removed on first member approval.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore(ci): fix prettier formatting

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat(ci): use work-in-progress label instead of under_review

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat(ci): split wip label into add/remove workflows with tested approach

- Split single workflow into add_wip_label.yml and remove_wip_label.yml
  to avoid paths filter affecting pull_request_review events
- Move association and label checks into github-script step instead of
  job if condition (GitHub Actions silently fails author_association
  checks in if expressions)
- Tested end-to-end in vectordotdev/ci-sandbox

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat(ci): trigger WIP label on synchronize to catch docs paths added later

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: pront

.github/CODEOWNERS

@@ -3,6 +3,7 @@
 .github/workflows/regression.yml @vectordotdev/vector @vectordotdev/single-machine-performance
 regression/config.yaml @vectordotdev/vector @vectordotdev/single-machine-performance
 
+# Keep documentation team paths in sync with .github/workflows/add_wip_label.yml
 docs/ @vectordotdev/vector @vectordotdev/documentation
 website/ @vectordotdev/vector
 website/content @vectordotdev/vector @vectordotdev/documentation

.github/workflows/add_wip_label.yml

@@ -0,0 +1,22 @@
+name: Add Work In Progress Label
+
+permissions:
+  pull-requests: write
+
+on:
+  pull_request_target:
+    types: [opened, reopened, synchronize]
+    # Keep these paths in sync with the documentation team entries in .github/CODEOWNERS
+    paths:
+      - "docs/**"
+      - "website/content/**"
+      - "website/cue/reference/**"
+
+jobs:
+  add_wip_label:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - uses: actions-ecosystem/action-add-labels@18f1af5e3544586314bbe15c0273249c770b2daf # v1.1.3
+        with:
+          labels: "work in progress"

.github/workflows/remove_wip_label.yml

@@ -0,0 +1,45 @@
+name: Remove Work In Progress Label
+
+permissions:
+  pull-requests: write
+
+on:
+  pull_request_review:
+    types: [submitted]
+
+jobs:
+  remove_wip_label:
+    if: github.event.review.state == 'approved'
+    runs-on: ubuntu-24.04
+    timeout-minutes: 5
+    steps:
+      - name: Check association, label, and remove
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const association = context.payload.review.author_association;
+            core.info(`Author association: ${association}`);
+
+            const allowed = ['MEMBER', 'OWNER'];
+            if (!allowed.includes(association)) {
+              core.info(`Association "${association}" not in allowed list, skipping`);
+              return;
+            }
+
+            const { data: labels } = await github.rest.issues.listLabelsOnIssue({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.payload.pull_request.number,
+            });
+            const hasLabel = labels.some(l => l.name === 'work in progress');
+            if (!hasLabel) {
+              core.info('Label "work in progress" not found, skipping');
+              return;
+            }
+            await github.rest.issues.removeLabel({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.payload.pull_request.number,
+              name: 'work in progress',
+            });
+            core.info('Removed "work in progress" label');