docs: add repo-management setup and automation docs

Documents branch protection, labels, secrets, and every GitHub Actions
workflow. Restructures repo-management/ to flat layout (setup.md,
automation.md, scripts/) and moves existing content files to root.

Author: Kristopher Turner

repo-management/README.md

@@ -1,25 +1,19 @@
 # Repo Management
 
-This folder contains repo planning, governance, delivery tracking, and working artifacts.
+This folder documents how this repository is configured and how its automation works.
 
-## Standard Layout
+## Contents
 
-| Path | Purpose |
+| File | Purpose |
 |------|---------|
-| `plans/` | Active implementation plans, design notes, and scoped work items |
-| `checklists/` | Audit lists, migration checklists, and operational gates |
-| `roadmaps/` | Milestones, release phases, and longer-horizon planning |
-| `reports/` | Discovery outputs, coverage reports, and analysis artifacts |
+| [`setup.md`](setup.md) | Branch protection, labels, secrets, CODEOWNERS, and replication guide |
+| [`automation.md`](automation.md) | Every GitHub Actions workflow — what it does, when it runs, secrets required |
+| [`training-buildout-plan.md`](training-buildout-plan.md) | Curriculum rebuild plan — legacy HCI content → Azure Local operator training |
 | `scripts/` | Repo-management helper scripts |
-| `working/` | Drafts, scratch notes, and temporary working material |
 
 ## Canonical References
 
 - Label definitions: `azurelocal.github.io/.github/labels.yml`
 - Repository standard: `azurelocal.github.io/.github/repo-standard.md`
 - Standards source: `azurelocal.github.io/standards/`
-
-## Notes
-
-Use `repo-management/` for planning and coordination artifacts.
-Use `standards/` at the repo root for canonical standards.
+- Repository management model: `azurelocal.github.io/standards/repository-management.mdx`

repo-management/automation.md

@@ -0,0 +1,42 @@
+# Automation
+
+Documents every GitHub Actions workflow in this repository.
+
+---
+
+## Workflow Summary
+
+| File | Name | Trigger | Purpose |
+|------|------|---------|---------|
+| `deploy-docs.yml` | Deploy Documentation | Push to `main` touching `docs/**` or `mkdocs.yml` | Builds MkDocs site and deploys to GitHub Pages |
+| `release-please.yml` | Release Please | Push to `main` | Automates CHANGELOG and releases |
+
+---
+
+## deploy-docs.yml
+
+**Trigger:** Push to `main` touching `docs/**` or `mkdocs.yml`  
+**Permissions:** `contents: read`, `pages: write`, `id-token: write`  
+**Concurrency group:** `pages` (cancel-in-progress: false)
+
+Two-job pipeline:
+
+**build:**
+1. Sets up Python 3.12
+2. Installs `mkdocs-material`
+3. `mkdocs build --strict` — fails on any warning
+4. Uploads `site/` as a pages artifact
+
+**deploy:**
+1. Uses `actions/deploy-pages@v4` to publish to GitHub Pages
+
+---
+
+## release-please.yml
+
+**Trigger:** Push to `main`  
+**Permissions:** `contents: write`, `pull-requests: write`
+
+Uses `googleapis/release-please-action@v4`. Maintains an automated release PR that updates `CHANGELOG.md` and bumps the version. Merging it creates the GitHub release and tag.
+
+Configuration is in `release-please-config.json` at repo root.

repo-management/checklists/.gitkeep

@@ -0,0 +1,63 @@
+# Repository Setup
+
+Documents how this repository is configured. Use this as the reference when setting up a new repo or auditing existing settings.
+
+---
+
+## Branch Protection
+
+**Protected branch:** `main`
+
+| Setting | Value |
+|---------|-------|
+| Require pull request before merging | Yes |
+| Required approvals | 1 |
+| Dismiss stale reviews on new commits | Yes |
+| Require status checks to pass | Yes |
+| Required checks | None beyond the standard PR checks |
+| Require branches to be up to date | Yes |
+| Restrict force pushes | Yes |
+| Allow admins to bypass | Yes |
+
+---
+
+## Labels
+
+Labels are defined in `azurelocal.github.io/.github/labels.yml` — that is the source of truth for all repos. Labels are applied here when they change in the source repo or manually via `workflow_dispatch` on `sync-labels.yml` in `azurelocal.github.io`.
+
+---
+
+## Secrets
+
+| Secret | Used By | Description |
+|--------|---------|-------------|
+| `GITHUB_TOKEN` | All workflows | Built-in GitHub token. |
+
+This repo has no `ADD_TO_PROJECT_PAT` — it does not use the `add-to-project.yml` workflow.
+
+---
+
+## CODEOWNERS
+
+Defined in `.github/CODEOWNERS`. Review and update if team membership changes.
+
+---
+
+## GitHub Pages
+
+| Setting | Value |
+|---------|-------|
+| Source | GitHub Actions (uses `actions/deploy-pages`) |
+| Build tool | MkDocs Material |
+| Deploy trigger | Push to `main` touching `docs/**` or `mkdocs.yml` |
+
+---
+
+## Replication Checklist
+
+- [ ] Enable branch protection on `main` per settings above
+- [ ] Add `.github/CODEOWNERS`
+- [ ] Add `.github/PULL_REQUEST_TEMPLATE.md`
+- [ ] Copy `release-please.yml` and `release-please-config.json`
+- [ ] Copy `deploy-docs.yml`
+- [ ] Enable GitHub Pages (Settings → Pages → Source: GitHub Actions)