fix: track issue type + locked state in backfill summary

- Add 'Issue Type set' column to processed issues summary table
- Track issueTypeSet per issue (null when already correct/unchanged)
- Skip REST label mutations for locked issues (they return 403) with
  a console note; Issue Type GraphQL sync still runs for locked issues
- Show lock emoji in issue number column when issue is locked
- Track actual applied add/remove counts (not desired counts)

Author: dgibbs64

.github/workflows/labeler.yml

@@ -1090,6 +1090,8 @@ jobs:
                 const existingLabels = new Set((issue.labels || []).map((l) => l.name).filter(Boolean));
                 const labelsToAdd = new Set();
                 const labelsToRemove = new Set();
+                const isLocked = issue.locked === true;
+                let issueTypeSet = null;
 
                 // Type reconciliation
                 const desiredType = inferDesiredType(title, existingLabels);
@@ -1127,6 +1129,7 @@ jobs:
                           }`,
                           { id: issueNode.id, issueTypeId: desiredIssueType.id }
                         );
+                        issueTypeSet = desiredIssueTypeName;
                         console.log(`#${rawIssue.number}: set Issue Type to ${desiredIssueTypeName}`);
                       }
                     } catch (err) {
@@ -1203,47 +1206,62 @@ jobs:
                   }
                 }
 
-                // Apply changes
+                // Apply changes (locked issues reject REST label mutations)
                 const finalAdds = [...labelsToAdd].filter((label) => !existingLabels.has(label));
                 const finalRemoves = [...labelsToRemove].filter((label) => existingLabels.has(label));
 
-                for (const label of finalRemoves) {
-                  try {
-                    await github.rest.issues.removeLabel({
-                      owner,
-                      repo,
-                      issue_number: rawIssue.number,
-                      name: label,
-                    });
-                    console.log(`#${rawIssue.number}: removed "${label}"`);
-                  } catch (err) {
-                    console.log(`#${rawIssue.number}: could not remove "${label}": ${err.message}`);
+                let labelAdded = 0;
+                let labelRemoved = 0;
+
+                if (isLocked && (finalAdds.length > 0 || finalRemoves.length > 0)) {
+                  console.log(
+                    `#${rawIssue.number}: issue is locked — skipping ${finalAdds.length} add(s) and ${finalRemoves.length} remove(s)`
+                  );
+                } else {
+                  for (const label of finalRemoves) {
+                    try {
+                      await github.rest.issues.removeLabel({
+                        owner,
+                        repo,
+                        issue_number: rawIssue.number,
+                        name: label,
+                      });
+                      labelRemoved += 1;
+                      console.log(`#${rawIssue.number}: removed "${label}"`);
+                    } catch (err) {
+                      console.log(`#${rawIssue.number}: could not remove "${label}": ${err.message}`);
+                    }
                   }
-                }
 
-                for (const label of finalAdds) {
-                  try {
-                    await github.rest.issues.addLabels({
-                      owner,
-                      repo,
-                      issue_number: rawIssue.number,
-                      labels: [label],
-                    });
-                    console.log(`#${rawIssue.number}: added "${label}"`);
-                  } catch (err) {
-                    console.log(`#${rawIssue.number}: could not add "${label}": ${err.message}`);
+                  for (const label of finalAdds) {
+                    try {
+                      await github.rest.issues.addLabels({
+                        owner,
+                        repo,
+                        issue_number: rawIssue.number,
+                        labels: [label],
+                      });
+                      labelAdded += 1;
+                      console.log(`#${rawIssue.number}: added "${label}"`);
+                    } catch (err) {
+                      console.log(`#${rawIssue.number}: could not add "${label}": ${err.message}`);
+                    }
                   }
                 }
 
                 processed += 1;
                 processedIssues.push({
                   number: rawIssue.number,
                   title: rawIssue.title,
-                  adds: finalAdds.length,
-                  removes: finalRemoves.length,
+                  adds: labelAdded,
+                  removes: labelRemoved,
+                  issueTypeSet,
+                  locked: isLocked,
                 });
                 console.log(
-                  `#${rawIssue.number}: done (+${finalAdds.length} added, -${finalRemoves.length} removed)`
+                  `#${rawIssue.number}: done (+${labelAdded} added, -${labelRemoved} removed${
+                    issueTypeSet ? `, type→${issueTypeSet}` : ''
+                  }${isLocked ? ', locked' : ''})`
                 );
               } catch (err) {
                 console.log(`Error processing #${rawIssue.number}: ${err.message}`);
@@ -1280,9 +1298,10 @@ jobs:
 
             if (processedIssues.length > 0) {
               const processedRows = processedIssues.slice(0, 50).map((issue) => [
-                `#${issue.number}`,
+                `#${issue.number}${issue.locked ? ' 🔒' : ''}`,
                 `[${issue.title}](https://github.com/${owner}/${repo}/issues/${issue.number})`,
                 `+${issue.adds} / -${issue.removes}`,
+                issue.issueTypeSet || '—',
               ]);
 
               await core.summary
@@ -1291,7 +1310,8 @@ jobs:
                   [
                     { data: 'Issue', header: true },
                     { data: 'Title', header: true },
-                    { data: 'Changes', header: true },
+                    { data: 'Label changes', header: true },
+                    { data: 'Issue Type set', header: true },
                   ],
                   ...processedRows,
                 ])