ci(warden): schedule warden-sweep weekly via dedicated workflow

Re-register warden-sweep in warden.toml with a schedule trigger (no
pull_request trigger, so it does not run on every PR) and add a
dedicated workflow that fires manually (workflow_dispatch) and weekly
(Mondays 06:00 UTC).

Schedule-triggered skills require a paths filter; sweep is scoped to
src/**/*.ts and scripts/** with tests/fixtures/snapshots ignored. The
schedule block enables a tracking issue and draft fix PRs prefixed
with warden-sweep.

Author: cameroncooke

.github/workflows/warden-sweep.yml

@@ -0,0 +1,27 @@
+name: Warden Sweep
+
+on:
+  workflow_dispatch:
+  schedule:
+    # 06:00 UTC every Monday
+    - cron: "0 6 * * 1"
+
+# contents: write required for sweep to open draft fix PRs
+# issues: write required for the sweep tracking issue
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+  checks: write
+
+jobs:
+  sweep:
+    runs-on: ubuntu-latest
+    env:
+      WARDEN_MODEL: ${{ secrets.WARDEN_MODEL }}
+      WARDEN_SENTRY_DSN: ${{ secrets.WARDEN_SENTRY_DSN }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: getsentry/warden@v0
+        with:
+          anthropic-api-key: ${{ secrets.WARDEN_ANTHROPIC_API_KEY }}

warden.toml

@@ -16,8 +16,27 @@ failOn = "high"
 # reportOn: minimum severity that creates PR annotations
 reportOn = "medium"
 
-# warden-sweep is intentionally NOT registered here — it's a full-repo manual
-# sweep. Invoke directly: `warden --skill warden-sweep`
+# warden-sweep is a full-repo sweep. PR-trigger is intentionally omitted so
+# it does not run on every PR. It runs:
+#   - On schedule via .github/workflows/warden-sweep.yml (workflow_dispatch + cron)
+#   - Locally via `warden --skill warden-sweep`
+[[skills]]
+name = "warden-sweep"
+paths = ["src/**/*.ts", "scripts/**/*.{js,mjs,sh,ts}"]
+ignorePaths = [
+  "**/*.test.ts",
+  "**/__tests__/**",
+  "**/__fixtures__/**",
+  "**/__snapshots__/**",
+]
+
+[[skills.triggers]]
+type = "schedule"
+
+[skills.triggers.schedule]
+issueTitle = "Warden weekly sweep"
+createFixPR = true
+fixBranchPrefix = "warden-sweep"
 
 [[skills]]
 name = "xcodebuildmcp-docs-release-review"