Updating production from staging

.gitattributes

@@ -1,2 +1,4 @@
 *.md  text eol=lf
 *.mdx text eol=lf
+
+.github/workflows/*.lock.yml linguist-generated=true merge=binary

.github/README.md

@@ -0,0 +1,61 @@
+# Agentic Workflows (`gh-aw`)
+
+This directory contains GitHub **agentic workflows** that automatically
+translate English documentation into Japanese when changes are pushed to
+`vnext`.
+
+## Workflow files
+
+| Source (`.md`) | Compiled (`.lock.yml`) | Watches |
+|---|---|---|
+| `workflows/sync-jp-docs-angular.md` | `workflows/sync-jp-docs-angular.lock.yml` | `docs/angular/src/content/en/**` on `vnext` |
+| `workflows/sync-jp-docs-xplat.md` | `workflows/sync-jp-docs-xplat.lock.yml` | `docs/xplat/src/content/en/**` on `vnext` |
+
+The `.md` files are the human-editable source. The `.lock.yml` files are
+auto-generated and are what GitHub Actions actually executes. **Do not edit
+`.lock.yml` files directly.** After changing a workflow `.md`, run `gh aw compile`
+and commit the regenerated `.lock.yml` file(s) (and `actions-lock.json` if it changed).
+
+## How to update a workflow
+
+### Prerequisites
+
+1. [GitHub CLI](https://cli.github.com/) installed
+2. The `gh-aw` extension installed:
+   ```bash
+   gh extension install github/gh-aw
+   ```
+3. Authenticated with `gh auth login`
+
+### Steps
+
+1. Edit the `.md` file under `.github/workflows/`.
+2. Run from the repo root:
+   ```bash
+   gh aw compile
+   ```
+   This regenerates the corresponding `.lock.yml` file(s) and updates
+   `.github/aw/actions-lock.json` if action SHAs changed.
+3. Commit **both** the `.md` and the `.lock.yml` together (plus
+   `actions-lock.json` if it changed).
+4. Push to `vnext`.
+
+For more information: https://github.github.com/gh-aw/introduction/overview/
+
+## Required GitHub secrets
+
+The following secrets must be configured at the repository level
+(Settings → Secrets and variables → Actions) for the agent workflows to
+run:
+
+| Secret | Required | Purpose |
+|---|---|---|
+| `GITHUB_TOKEN` | Auto (built-in) | Standard token — nothing to provision |
+| `COPILOT_GITHUB_TOKEN` | **Yes** | Authenticates the Copilot CLI engine that drives the translation agent. Without it, the workflow fails immediately. |
+| `GH_AW_GITHUB_TOKEN` | Recommended | Elevated token the agent uses to create the translation PR. Falls back to `GITHUB_TOKEN` if unset. |
+| `GH_AW_GITHUB_MCP_SERVER_TOKEN` | Optional | Token for the embedded GitHub MCP read-only tools. Falls back to `GITHUB_TOKEN`. |
+| `GH_AW_CI_TRIGGER_TOKEN` | Optional | Triggers CI on the auto-created PR. Only needed if you want checks to run on bot PRs. |
+
+These are the same secrets used in the old `igniteui-docfx` and
+`igniteui-xplat-docs` repositories.
+

.github/aw/actions-lock.json

@@ -0,0 +1,24 @@
+{
+  "entries": {
+    "actions/github-script@v9": {
+      "repo": "actions/github-script",
+      "version": "v9",
+      "sha": "373c709c69115d41ff229c7e5df9f8788daa9553"
+    },
+    "actions/github-script@v9.0.0": {
+      "repo": "actions/github-script",
+      "version": "v9.0.0",
+      "sha": "3a2844b7e9c422d3c10d287c895573f7108da1b3"
+    },
+    "github/gh-aw-actions/setup-cli@v0.79.8": {
+      "repo": "github/gh-aw-actions/setup-cli",
+      "version": "v0.79.8",
+      "sha": "c0338fef4749d08c21f8f975fb0e37efa17dda47"
+    },
+    "github/gh-aw-actions/setup@v0.79.8": {
+      "repo": "github/gh-aw-actions/setup",
+      "version": "v0.79.8",
+      "sha": "c0338fef4749d08c21f8f975fb0e37efa17dda47"
+    }
+  }
+}