Sync main back into staging (weekly release cycle workflows)

.github/workflows/staging-freeze.yml

@@ -0,0 +1,15 @@
+name: Staging Freeze
+on:
+  schedule:
+    # Friday 13:47 UTC — off the top of the hour (GitHub's documented high-load
+    # slot) and off a DST-sensitive "6am PST" wording.
+    - cron: '47 13 * * 5'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  freeze:
+    uses: mindsdb/github-actions/.github/workflows/release-freeze.yml@75df118f3b003625052c4f14e7b90817fb8b2784 # v1
+    secrets: inherit

.github/workflows/staging-unfreeze.yml

@@ -0,0 +1,19 @@
+name: Staging Unfreeze
+on:
+  pull_request:
+    types: [closed]
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  unfreeze:
+    if: >
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.pull_request.merged == true &&
+       github.event.pull_request.head.ref == 'staging' &&
+       github.event.pull_request.head.repo.full_name == github.repository)
+    uses: mindsdb/github-actions/.github/workflows/release-unfreeze.yml@75df118f3b003625052c4f14e7b90817fb8b2784 # v1
+    secrets: inherit

.github/workflows/weekly-merge-staging.yml

@@ -0,0 +1,17 @@
+name: Create staging to main release PR
+on:
+  workflow_run:
+    workflows: ["Staging Freeze"]
+    types: [completed]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  create-pr:
+    if: >
+      github.event_name == 'workflow_dispatch' ||
+      github.event.workflow_run.conclusion == 'success'
+    uses: mindsdb/github-actions/.github/workflows/release-pr.yml@75df118f3b003625052c4f14e7b90817fb8b2784 # v1
+    secrets: inherit