feat(sagemaker-core): Add botocore-sync GitHub workflows (#6226)

* feat(sagemaker-core): Add botocore-sync GitHub workflows

Enable the daily botocore-sync automation for the sagemaker-core module
in the monorepo:

- Add scheduled sync (sagemaker-core-botocore-sync.yml), auto-approve, and
  auto-merge workflows. They trigger the CodeBuild projects via the repo's
  existing CI_AWS_ROLE_ARN OIDC role; auto-merge is gated to sagemaker-bot
  + botocore-sync* branch + "Daily Sync with Botocore" title, scoped to
  sagemaker-core/sample/**/*.json.
- Remove a stray hardcoded absolute SERVICE_JSON_FILE_PATH override in
  data_extractor.py so codegen resolves service models via the
  package-relative constant in constants.py.

* chore(sagemaker-core): Defer auto-approve/merge sync workflows

Remove the auto-approve and auto-merge workflows for now so the daily
botocore sync can be validated in isolation: the sync workflow opens a PR
that is left for manual review. The approve/merge automation will be
re-added in a follow-up once PR generation is verified. Both files remain
in history (commit 99ac5f7) and can be restored when needed.

---------

Co-authored-by: Roja Reddy Sareddy <rsareddy@amazon.com>

Author: rsareddy0329

.github/workflows/sagemaker-core-botocore-sync.yml

@@ -0,0 +1,38 @@
+name: SageMaker Core - Daily Sync with Botocore
+
+# Scheduled trigger that kicks off the CodeBuild project which fetches the
+# latest service-2.json models from boto3/botocore, regenerates the
+# sagemaker-core resource/shape classes, and opens a "Daily Sync with Botocore"
+# PR as the sagemaker-bot user.
+#
+# NOTE: The CodeBuild project `sagemaker-core-botocore-sync` is provisioned
+# separately (deferred account-side setup). It reuses the repo's existing
+# `CI_AWS_ROLE_ARN` OIDC role (same role every other CI workflow uses); that
+# role must be granted codebuild:StartBuild on this project. Until the project
+# exists, this workflow will fail on the Run CodeBuild step.
+
+on:
+  schedule:
+    # Every Monday to Friday at 10:00 UTC (3:00 PDT)
+    - cron: "00 10 * * 1-5"
+  # Allow manual runs for testing once CodeBuild is wired up.
+  workflow_dispatch:
+
+permissions:
+  id-token: write # Required for requesting the OIDC JWT
+
+jobs:
+  sync-with-botocore:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
+          role-duration-seconds: 10800
+          aws-region: us-west-2
+
+      - name: Run CodeBuild
+        uses: aws-actions/aws-codebuild-run-build@v1
+        with:
+          project-name: sagemaker-core-botocore-sync