fix: update GH_TOKEN to use COPILOT_ISSUE_PR_AGENTIC_WORKFLOW and add step to close stale upstream-sync issues

Author: brunoborges

.github/workflows/weekly-upstream-sync.yml

@@ -56,7 +56,7 @@ jobs:
       - name: Close previous upstream-sync issues
         if: steps.check.outputs.has_changes == 'true'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.COPILOT_ISSUE_PR_AGENTIC_WORKFLOW }}
         run: |
           # Find all open issues with the upstream-sync label
           OPEN_ISSUES=$(gh issue list \
@@ -76,10 +76,32 @@ jobs:
               --reason "not planned"
           done
 
+      - name: Close stale upstream-sync issues (no changes)
+        if: steps.check.outputs.has_changes == 'false'
+        env:
+          GH_TOKEN: ${{ secrets.COPILOT_ISSUE_PR_AGENTIC_WORKFLOW }}
+        run: |
+          OPEN_ISSUES=$(gh issue list \
+            --repo "${{ github.repository }}" \
+            --label "upstream-sync" \
+            --state open \
+            --json number \
+            --jq '.[].number')
+
+          for ISSUE_NUM in $OPEN_ISSUES; do
+            echo "Closing stale issue #${ISSUE_NUM} — upstream is up to date"
+            gh issue comment "$ISSUE_NUM" \
+              --repo "${{ github.repository }}" \
+              --body "No new upstream changes detected. The Java SDK is up to date. Closing."
+            gh issue close "$ISSUE_NUM" \
+              --repo "${{ github.repository }}" \
+              --reason "completed"
+          done
+
       - name: Create issue and assign to Copilot
         if: steps.check.outputs.has_changes == 'true'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.COPILOT_ISSUE_PR_AGENTIC_WORKFLOW }}
         run: |
           COMMIT_COUNT="${{ steps.check.outputs.commit_count }}"
           LAST_MERGE="${{ steps.check.outputs.last_merge }}"