add pull request template + compliance check action

[mmkal]

Based on an X conversation - it seems there's at least one coding course that instructs students to spam express. Hopefully this can help cut it down.

https://x.com/mmkalmmkal/status/1828811200802816185

I'm not 100% sure the compliance check will actually work with the default GitHub token. If not there may be a free GitHub app that can do something similar.

[IamLizu]

I'm not 100% sure the compliance check will actually work with the default GitHub token. If not there may be a free GitHub app that can do something similar.

I also think it won't work. Because GITHUB_TOKEN generated by a PR author who has no write access to this repository won't get write scope, so they won't be able to update or create comment in the PR.

We have a similar situation in expressjs/expressjs.com#1553

[mmkal]

I also think it won't work. Because GITHUB_TOKEN generated by a PR author who has no write access to this repository won't get write scope, so they won't be able to update or create comment in the PR.

I am not confident of it, but GitHub might allow GITHUB_TOKEN to modify the PR that triggered it in the first place. The problem in that referenced issue might come from the workflow_dispatch trigger, maybe?

I'll try it out on a test repo and report back here.

[jonchurch]

A few of us have suggested things in this same vein, but we've opted to not go this route.

I'd rather not optimize for the misguided folks and add these gates. It is a good thought, and ty for thinking of us. We close and lock at least a few of these a week, which is the easiest part of the work here 😉

[mmkal]

Fair enough!

[wesleytodd]

Yeah, this has been ongoing at a low simmer for a long time now. The one thing I really like from this PR is the disclaimer, which I think if we just did that maybe I would be onboard with.

# STOP! Read this before submitting your pull request
## ⚠️ Warning ⚠️
This repository is not for educational exercises or trivial changes. Pull requests that do not provide substantial value will be closed immediately.
-->```

Maybe we could just land this alone?