When a Copilot coding agent opens a PR in any org repo and the Docker image build succeeds, automatically deploy that image to the repo's designated testing cluster by generating a service orders folder in the corresponding deployment repo. When the PR is closed or merged, automatically clean up the deployment.
Key constraints:
- Only testing clusters — never production
- Org-level setup, minimal per-repo configuration
- No personal access tokens — GitHub Apps only