chore: add auto-approve workflow

.github/workflows/auto-approve.yml

@@ -0,0 +1,32 @@
+name: auto-approve
+on:
+  pull_request_target:
+    types:
+      - opened
+      - labeled
+      - ready_for_review
+      - reopened
+concurrency: ${{ github.workflow }}-${{ github.ref }}
+jobs:
+  approve:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    if: contains(github.event.pull_request.labels.*.name, 'auto-approve') && github.event.pull_request.draft == false
+    steps:
+      - name: Checkout PR
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        with:
+          ref: ${{ github.event.pull_request.head.ref }}
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+      - name: Auto-approve PRs by other users as team-tf-cdk
+        if: github.event.pull_request.user.login != 'team-tf-cdk' && (contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association) || github.actor == 'dependabot[bot]')
+        env:
+          GH_TOKEN: ${{ secrets.GH_TOKEN }} # NOTE: Replace this with the name of your token associated with the team-tf-cdk user
+        run: gh pr review ${{ github.event.pull_request.number }} --approve
+      - name: Auto-approve PRs by team-tf-cdk as github-actions[bot]
+        if: github.event.pull_request.user.login == 'team-tf-cdk'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token does not need to be replaced
+        run: gh pr review ${{ github.event.pull_request.number }} --approve