Remove the EndBug/label-sync mechanism (superseded by declarative IssueLabels)

[devantler]

🤖 Generated by the Daily AI Assistant

Problem

Once #57 lands, issue labels for all managed repos are reconciled declaratively by Crossplane IssueLabels (the github-config tenant). The old EndBug/label-sync mechanism then becomes redundant and should be removed so there is a single source of truth.

Old approach to remove (in order, only after #57 is merged AND verified reconciling live — never leave a gap in label management)

1. reusable-workflows — delete the template .github/workflows/.sync-labels.yaml (the daily label-sync template distributed by template-sync).
2. Each consuming repo — delete the template-synced .github/workflows/sync-labels.yaml (present in all 17 repos: the 14 in deploy/repositories/ + .github + actions + reusable-workflows). Confirm the template-sync config does not re-add it.
3. actions — delete the now-unused sync-github-labels/ composite action, its central config .github/labels.yaml (the taxonomy now lives in deploy/labels/kustomization.yaml), and the repo's own .github/workflows/active-sync-github-labels.yaml.

Open scope decisions (flagged in #57)

• actions + reusable-workflows have the label-sync workflow but are not in deploy/repositories/, so feat(deploy): manage issue labels declaratively across all repos #57 does not yet declare their labels (the provider App's access to them is unconfirmed). Before removing their sync workflow, either bring them under repo-management (+ add deploy/labels/<repo>.yaml) or confirm the github-config provider App can manage their labels.

Acceptance

• No repo runs the label-sync workflow; actions/sync-github-labels + actions/.github/labels.yaml are gone; all repos' labels are reconciled solely by deploy/labels/.

Part of #56. Depends on #51 / #57.

[devantler]

🤖 Generated by the Daily AI Assistant

Hold — do not start this removal yet. A live check today (read-only) shows the declarative IssueLabels are not reconciling: all 15 IssueLabels (and all 14 Repository) CRs are Synced=False with credentials secret "github-app-credentials" not found. Root cause: #50 inadvertently dropped external-secret.yaml + provider-config.yaml from deploy/kustomization.yaml, which #62's first auto-release (v1.5.0) then pruned from the cluster.

Fix is up as #64 (restore the credential wiring). This issue's own gate — "only after #57 is verified reconciling live — never leave a gap in label management" — therefore is not yet satisfied: it stays blocked until #64 lands, v1.5.1 publishes, and the IssueLabels CRs are confirmed Synced=True live.