Monthly Pathfinder gap-analysis automation

[jpr5]

Summary

• Adds a monthly GitHub Actions workflow that pulls Pathfinder analytics, clusters unanswered / empty-result queries into actionable documentation gaps (deterministic clustering + optional LLM classification), and reports high-severity gaps to Slack with a Notion report.
• Durable month-over-month state via workflow artifacts (not cache, which evicts at 7 days idle) so the high-severity dedup survives the monthly cadence; persist-before-alert ordering prevents repeat-alert storms.

Required configuration (before enabling)

• New repo secrets: PATHFINDER_ANALYTICS_TOKEN (analytics API bearer), ANTHROPIC_API_KEY (optional — LLM classification; falls back to deterministic clustering if unset), NOTION_TOKEN (report publishing).
• Reuses the existing SLACK_WEBHOOK_OSS_ALERTS org secret.
• Workflow grants actions: read (cross-run artifact download for the prior-state baseline).

Notes

• scripts/gap-analysis/ is excluded from the npm tarball (.npmignore); @anthropic-ai/sdk is a devDependency (only this CI script uses it, dynamically imported).
• Typechecked via tsconfig.scripts.json; 93 unit tests cover clustering, LLM-output recovery, dedup/cap, the dry-run contract, and prompt-injection escaping of untrusted query text.
• Deferred (non-blocking) robustness follow-ups tracked for a follow-up PR: cold-start state-chain log nuance, additional LLM-output recovery edge-cases, Notion >100-block batching, CJK query normalization.

Test plan

• CI green (typecheck-scripts, prettier, vitest).
• Provision the 3 secrets, then a manual workflow_dispatch dry-run to verify analytics fetch + report generation without alerting.