feat: add monthly schedule to release-tests and document repo-level secrets

Add cron schedule (1st of every month at 9:00 UTC) to release-tests.yml
with fallback defaults for inputs. Document repo-level secret requirement
in SKILL.md since the orchestrator reads secrets from repo scope.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: EMaher

.github/skills/integration-test-prerequisites/SKILL.md

@@ -146,6 +146,30 @@ gh secret set APIM_PUBLISHER_EMAIL \
   --body "${APIM_PUBLISHER_EMAIL}"
 ```
 
+### 6) Set Repo-Level Secrets (for release-tests orchestrator)
+
+The `release-tests.yml` orchestrator passes secrets to called workflows via explicit `secrets:` mapping. Since the orchestrator itself does not declare an `environment:`, it reads from **repo-level** secrets. Set the same values at the repo level:
+
+```bash
+gh secret set AZURE_CLIENT_ID \
+  --repo "${GITHUB_OWNER}/${GITHUB_REPO}" \
+  --body "${IDENTITY_CLIENT_ID}"
+
+gh secret set AZURE_TENANT_ID \
+  --repo "${GITHUB_OWNER}/${GITHUB_REPO}" \
+  --body "${TENANT_ID}"
+
+gh secret set AZURE_SUBSCRIPTION_ID \
+  --repo "${GITHUB_OWNER}/${GITHUB_REPO}" \
+  --body "${SUBSCRIPTION_ID}"
+
+gh secret set APIM_PUBLISHER_EMAIL \
+  --repo "${GITHUB_OWNER}/${GITHUB_REPO}" \
+  --body "${APIM_PUBLISHER_EMAIL}"
+```
+
+> **Note:** If you only have environment-level secrets without matching repo-level secrets, the `release-tests.yml` workflow will fail because `${{ secrets.* }}` in the orchestrator resolves from repo scope. The called workflows still use the `integration-test` environment for OIDC token issuance.
+
 ## Verification
 
 ```bash

.github/workflows/release-tests.yml

@@ -11,6 +11,8 @@
 name: "Release Tests"
 
 on:
+  schedule:
+    - cron: '0 9 1 * *' # 1st of every month at 9:00 UTC
   workflow_dispatch:
     inputs:
       sku:
@@ -48,9 +50,9 @@ jobs:
     needs: ci
     uses: ./.github/workflows/integration-test.yml
     with:
-      sku: ${{ inputs.sku }}
-      location: ${{ inputs.location }}
-      log_level: ${{ inputs.log_level }}
+      sku: ${{ inputs.sku || 'StandardV2' }}
+      location: ${{ inputs.location || 'centralus' }}
+      log_level: ${{ inputs.log_level || 'Verbose' }}
     secrets:
       AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
       AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}
@@ -62,9 +64,9 @@ jobs:
     needs: all-types-integration
     uses: ./.github/workflows/integration-redact-secrets.yml
     with:
-      sku: ${{ inputs.sku }}
-      location: ${{ inputs.location }}
-      log_level: ${{ inputs.log_level }}
+      sku: ${{ inputs.sku || 'StandardV2' }}
+      location: ${{ inputs.location || 'centralus' }}
+      log_level: ${{ inputs.log_level || 'Verbose' }}
     secrets:
       AZURE_CLIENT_ID: ${{ secrets.AZURE_CLIENT_ID }}
       AZURE_TENANT_ID: ${{ secrets.AZURE_TENANT_ID }}