ci: Add release approval pending notify workflow to default branch

.github/workflows/release-approval-pending-notify.yml

@@ -0,0 +1,47 @@
+name: Release Approval Pending Notify
+
+on:
+  schedule:
+    - cron: "*/15 * * * *"
+  workflow_dispatch:
+  workflow_run:
+    workflows:
+      - native-cli-publish
+      - dispatcher-publish
+    types:
+      - completed
+
+permissions:
+  actions: read
+  issues: write
+  contents: read
+
+concurrency:
+  group: release-approval-pending-notify
+  cancel-in-progress: false
+
+jobs:
+  notify:
+    runs-on: ubuntu-latest
+
+    steps:
+      # schedule/workflow_run only fire from workflow files on the default branch (main), which
+      # has no cli/ directory; the reconcile implementation lives on v3-beta, so this checkout
+      # must pin ref explicitly instead of using the triggering event's ref.
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
+        with:
+          ref: v3-beta
+
+      - name: Setup Go
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c
+        with:
+          go-version-file: cli/.go-version
+          cache: false
+
+      - name: Reconcile pending release approval issue
+        working-directory: cli/release-automation
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_REPOSITORY: ${{ github.repository }}
+        run: go run ./cmd/notify-pending-release-approvals