Sync feature/nest-zappa-migration with main

.github/PULL_REQUEST_TEMPLATE.md

@@ -23,6 +23,7 @@ Add the PR description here.
 
 ## Checklist
 
-- [ ] **Required:** I read and followed the [contributing guidelines](https://github.com/OWASP/Nest/blob/main/CONTRIBUTING.md)
-- [ ] **Required:** I ran `make check-test` locally and all tests passed
-- [ ] I used AI for code, documentation, or tests in this PR
+- [ ] **Required:** I followed the [contributing workflow](https://github.com/OWASP/Nest/blob/main/CONTRIBUTING.md#contributing-workflow)
+- [ ] **Required:** I verified that my code works as intended and resolves the issue as described
+- [ ] **Required:** I ran `make check-test` locally: all warnings addressed, tests passed
+- [ ] I used AI for code, documentation, tests, or communication related to this PR

.github/workflows/check-pr-issue.yaml

@@ -5,6 +5,8 @@ on:
     types:
       - opened
 
+permissions: {}
+
 jobs:
   check-pr-issue:
     permissions:
@@ -27,3 +29,4 @@ jobs:
           no_issue_message: 'The PR must be linked to an issue assigned to the PR author.'
           require_assignee: 'true'
           skip_users_file_path: '.github/workflows/check-pr-issue-skip-usernames.txt'
+    timeout-minutes: 5

.github/workflows/label-issues.yaml

@@ -6,6 +6,8 @@ on:
       - edited
       - opened
 
+permissions: {}
+
 jobs:
   label:
     permissions:
@@ -40,3 +42,4 @@ jobs:
                 repo: context.repo.repo
               });
             }
+    timeout-minutes: 5

.github/workflows/label-pull-requests.yaml

@@ -3,6 +3,8 @@ name: Label Pull Requests
 on:
   - pull_request_target
 
+permissions: {}
+
 jobs:
   labeler:
     permissions:
@@ -14,3 +16,4 @@ jobs:
         with:
           configuration-path: .github/labeler.yml
           sync-labels: true
+    timeout-minutes: 5