ci: init pr.yml and merge-queue.yml workflows

These workflows will serve as top-level entry points for running GHA
jobs against PRs and merge groups in the merge queue.

Author: MattSturgeon

.github/workflows/merge-queue.yml

@@ -0,0 +1,26 @@
+name: Merge Queue
+
+on:
+  merge_group:
+
+permissions: {}
+
+jobs:
+  # TODO: add workflow_call jobs
+
+  # This job's only purpose is to serve as a target for the "Required Status Checks" branch ruleset.
+  # It "needs" all the jobs that should block the Merge Queue.
+  # If they pass, it is skipped — which counts as "success" for purposes of the branch ruleset.
+  # However, if any of them fail, this job will also fail — thus blocking the branch ruleset.
+  no-pr-failures:
+    # Modify this list to add or remove jobs from required status checks.
+    needs: [] # TODO
+    # WARNING:
+    # Do NOT change the name of this job, otherwise the rule will not catch it anymore.
+    # This would prevent all PRs from passing the merge queue.
+    name: no PR failures
+    # The "cancelled()" function only checks the whole workflow, but not individual jobs.
+    if: ${{ failure() || contains(needs.*.result, 'cancelled') }}
+    runs-on: ubuntu-24.04-arm
+    steps:
+      - run: exit 1

.github/workflows/pr.yml

@@ -0,0 +1,30 @@
+name: PR
+
+on:
+  pull_request:
+
+concurrency:
+  group: pr-${{ github.workflow }}-${{ github.event_name }}-${{ github.event.pull_request.number || github.run_id }}
+  cancel-in-progress: true
+
+permissions: {}
+
+jobs:
+  # TODO: add workflow_call jobs
+
+  # This job's only purpose is to serve as a target for the "Required Status Checks" branch ruleset.
+  # It "needs" all the jobs that should block merging a PR.
+  # If they pass, it is skipped — which counts as "success" for purposes of the branch ruleset.
+  # However, if any of them fail, this job will also fail — thus blocking the branch ruleset.
+  no-pr-failures:
+    # Modify this list to add or remove jobs from required status checks.
+    needs: [] # TODO
+    # WARNING:
+    # Do NOT change the name of this job, otherwise the rule will not catch it anymore.
+    # This would prevent all PRs from merging.
+    name: no PR failures
+    # The "cancelled()" function only checks the whole workflow, but not individual jobs.
+    if: ${{ failure() || contains(needs.*.result, 'cancelled') }}
+    runs-on: ubuntu-24.04-arm
+    steps:
+      - run: exit 1