rust-guard: collapse duplicated repo-write match arms and add pre-emptive tool coverage

[Copilot]

apply_tool_labels had 12 consecutive repo-scoped write arms with identical S(repo) + writer behavior, creating avoidable duplication and making future additions error-prone. This PR consolidates those arms and adds explicit coverage for two pre-emptive write tool groups that previously had no direct tests.

• Match-arm consolidation (repo-scoped writes)

  • Merged issue/PR writes, discussion comment write, granular issue/PR mutations, repo content writes, label/actions/workflow writes, Copilot/repo settings writes, comment edit/delete, and release management tools into a single arm.
  • Preserved grouping intent with inline category comments on tool-name clusters.

• Pre-emptive write tool test coverage

  • Added apply_tool_labels_issue_comment_edit_delete_is_repo_scoped_write for:
    • update_issue_comment, delete_issue_comment
  • Added apply_tool_labels_release_management_is_repo_scoped_write for:
    • create_release, edit_release, delete_release
  • Both tests assert writer integrity and repo-visibility-derived secrecy behavior.

• Behavior shape after refactor (unchanged semantics)

// === Repo-scoped write operations ===
"create_issue"
| "issue_write"
| "discussion_comment_write"
| "create_or_update_file"
| "label_write"
| "actions_run_trigger"
| "update_issue_comment"
| "create_release"
| /* ...remaining repo-scoped write tools... */ => {
    secrecy = apply_repo_visibility_secrecy(&owner, &repo, repo_id, secrecy, ctx);
    integrity = writer_integrity(repo_id, ctx);
}

[Copilot]

Pull request overview

This PR refactors the rust-guard tool labeling rules by consolidating many repo-scoped write tool match arms that shared identical secrecy/integrity behavior, and adds targeted tests for two pre-emptive write tool groups to ensure they get writer integrity and repo-visibility-derived secrecy handling.

Changes:

• Collapsed multiple duplicated repo-scoped write match arms in apply_tool_labels into a single consolidated arm while preserving category grouping via inline comments.
• Added unit tests covering repo-scoped write labeling for issue comment edit/delete and release management tools.

Show a summary per file

File	Description
guards/github-guard/rust-guard/src/labels/tool_rules.rs	Consolidates repo-scoped write tool labeling into one match arm and adds explicit unit tests for issue comment edit/delete and release management tool labeling.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 1/1 changed files
• Comments generated: 1