Enable copy-pr-bot for NVIDIA-hosted GitHub Actions runners

[JanuszL]

• Allows workflows to utilize NVIDIA-hosted runners.
• Enables creation of branches in the main repository from pull
  requests, providing control over jobs executed on NVIDIA runners.
• For more details, see: https://docs.gha-runners.nvidia.com/platform/apps/copy-pr-bot/

Category:

Other (e.g. Documentation, Tests, Configuration)

Description:

• Allows workflows to utilize NVIDIA-hosted runners so we can run https://github.com/NVIDIA/security-workflows/blob/main/.github/workflows/secret-scan-pulse.yml workflow (available only on NVIDIA hosted runners)
• Enables creation of branches in the main repository from pull
  requests, providing control over jobs executed on NVIDIA runners.
• For more details, see: https://docs.gha-runners.nvidia.com/platform/apps/copy-pr-bot/
• Important: copy-pr-bot enforces signed commits. If an organization member opens a PR that contains unsigned commits, it will be deemed untrusted and therefore require an /ok to test comment. See the GitHub docs here for information on how to set up commit signing.
• Any time a PR is deemed untrusted, it will receive a comment that looks like this: Test PR rapidsai/ci-imgs#63 (comment).
• Every subsequent commit on an untrusted PR will require an additional /ok to test comment.
• Any existing PRs that have unsigned commits after this change is merged will require an /ok to test comment for each subsequent commit or the PR can be rebased to include signed commits as mentioned in the docs below: https://docs.gha-runners.nvidia.com/cpr/contributors (this information is all included on the documentation page linked above.)

Additional information:

Affected modules and functionalities:

• GitHub configuration

Key points relevant for the review:

Tests:

• Existing tests apply
• New tests added
  • Python tests
  • GTests
  • Benchmark
  • Other
• N/A
  • Not possible to test

Checklist

Documentation

• Existing documentation applies
• Documentation updated
  • Docstring
  • Doxygen
  • RST
  • Jupyter
  • Other
• N/A

DALI team only

Requirements

• Implements new requirements
• Affects existing requirements
• N/A

REQ IDs: N/A

JIRA TASK: N/A

[greptile-apps]

Greptile Summary

Adds repository configuration that enables copy-pr-bot so trusted pull-request branches can be created for workflows running on NVIDIA-hosted GitHub Actions runners.

• Enables the GitHub App for the repository.
• Disables automatic synchronization of draft pull requests.

Confidence Score: 5/5

The PR appears safe to merge with no concrete blocking or non-blocking issue identified.

The new configuration is internally consistent with the stated copy-pr-bot rollout, and repository context establishes no workflow or synchronization contract that it breaks.

Important Files Changed

Filename	Overview
.github/copy-pr-bot.yaml	Adds a minimal copy-pr-bot configuration with the app enabled and automatic draft synchronization disabled; no actionable defect was established.

_{Reviews (1): Last reviewed commit: "Enable copy-pr-bot for NVIDIA-hosted Git..." | Re-trigger Greptile}