feat(ci): notify TechAPI to bump submodule on push to main

Add notify-techapi.yml: on every push to main, send a repository_dispatch (engine-updated) to Seungpyo1007/TechAPI so its bump-engine.yml advances the TechEngine submodule pointer to the new commit. Uses the existing TECHAPI_TOKEN (Contents:write is sufficient for the dispatches API).

Also rename TECHAPI_PR_TOKEN -> TECHAPI_TOKEN in weekly-ingest.yml to match the actual secret; the mismatch was silently skipping the ingest PR step. coverage-report.yml is left untouched (its issue-posting needs Issues:write, decided separately).

Author: Seungpyo1007

.github/workflows/notify-techapi.yml

@@ -0,0 +1,27 @@
+name: notify-techapi
+
+# On every push to main, ping TechAPI so it bumps its TechEngine submodule
+# pointer to the new commit. The bump itself happens in TechAPI's bump-engine.yml
+# (triggered by this repository_dispatch); TechEngine only fires the signal.
+#
+# No loop: TechAPI's bump commit lands in TechAPI, never pushed back here.
+# Requires TECHAPI_TOKEN (Contents: write on Seungpyo1007/TechAPI) — already set.
+on:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  notify:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Dispatch engine-updated to TechAPI
+        uses: peter-evans/repository-dispatch@v3
+        with:
+          token: ${{ secrets.TECHAPI_TOKEN }}
+          repository: Seungpyo1007/TechAPI
+          event-type: engine-updated
+          client-payload: |
+            {"sha": "${{ github.sha }}", "ref": "${{ github.ref }}"}

.github/workflows/weekly-ingest.yml

@@ -31,7 +31,7 @@ jobs:
       CATEGORY: ${{ inputs.category || 'cpu' }}
       LIMIT: ${{ inputs.limit || '50' }}
       INCLUDE_DRAFTS: ${{ inputs.include_drafts || 'false' }}
-      TECHAPI_PR_TOKEN: ${{ secrets.TECHAPI_PR_TOKEN }}
+      TECHAPI_TOKEN: ${{ secrets.TECHAPI_TOKEN }}
     steps:
       - uses: actions/checkout@v4
 
@@ -41,7 +41,7 @@ jobs:
         with:
           repository: Seungpyo1007/TechAPI
           path: TechAPI
-          token: ${{ secrets.TECHAPI_PR_TOKEN || secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.TECHAPI_TOKEN || secrets.GITHUB_TOKEN }}
 
       - uses: actions/setup-python@v5
         with:
@@ -112,11 +112,11 @@ jobs:
       - name: Open PR against TechAPI
         if: steps.changes.outputs.has_changes == 'true'
         env:
-          GH_TOKEN: ${{ secrets.TECHAPI_PR_TOKEN }}
+          GH_TOKEN: ${{ secrets.TECHAPI_TOKEN }}
         run: |
           set -euo pipefail
           if [ -z "${GH_TOKEN:-}" ]; then
-            echo "::warning::Ingest produced additions but TECHAPI_PR_TOKEN is unset; skipping PR. Summary attached as artifact."
+            echo "::warning::Ingest produced additions but TECHAPI_TOKEN is unset; skipping PR. Summary attached as artifact."
             exit 0
           fi
           cd TechAPI