workflow: add update-caps (#1158)

Signed-off-by: Stephan Renatus <stephan@styra.com>

.github/workflows/update-caps.yml

@@ -0,0 +1,44 @@
+name: "Update EOPA caps"
+
+on:
+  schedule:
+    - cron: "0 0 * * *"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  fetch:
+    name: Fetch EOPA caps
+    runs-on: ubuntu-latest
+    env:
+      RQ_VERSION: v0.0.9
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
+        with:
+          go-version-file: go.mod
+      - name: Restore rq cache
+        id: cache-rq
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
+        with:
+          path: ~/go/bin/rq
+          key: ${{ runner.os }}-${{ runner.arch }}-go-rq-${{ env.RQ_VERSION }}
+      - run: go install git.sr.ht/~charles/rq/cmd/rq@${{ env.RQ_VERSION }}
+        if: steps.cache-rq.outputs.cache-hit != 'true'
+      - name: Cache rq binary
+        if: steps.cache-rq.outputs.cache-hit != 'true'
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
+        with:
+          path: ~/go/bin/rq
+          key: ${{ runner.os }}-${{ runner.arch }}-go-rq-${{ env.RQ_VERSION }}
+      - run: build/do.rq fetch
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
+        with:
+          title: "automated: update capabilities"
+          add-paths: |
+            internal/capabilities/embedded/eopa/*.json