chore: import upstream snapshot with attribution

.github/workflows/cla.yml

@@ -0,0 +1,60 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+name: CLA
+
+on:
+  check_run:
+    types: [completed]
+
+permissions:
+  pull-requests: write
+
+jobs:
+  cla-label:
+    name: CLA Label
+    if: github.event.check_run.name == 'cla/google'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Update CLA label
+        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        with:
+          github-token: ${{ secrets.GOOGLEWORKSPACE_BOT_TOKEN }}
+          script: |
+            const cr = context.payload.check_run;
+            const passed = cr.conclusion === 'success';
+
+            for (const pr of cr.pull_requests) {
+              const labels = passed
+                ? { add: 'cla: yes', remove: 'cla: no' }
+                : { add: 'cla: no', remove: 'cla: yes' };
+
+              await github.rest.issues.addLabels({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: pr.number,
+                labels: [labels.add],
+              });
+
+              try {
+                await github.rest.issues.removeLabel({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  issue_number: pr.number,
+                  name: labels.remove,
+                });
+              } catch (e) {
+                // Label not present — ignore
+              }
+            }