korg: add userinfo command for org and OWNERS lookup

  Adds `korg userinfo <user>...` to answer the recurring question this
  repo exists for: which Kubernetes orgs is a user in, what role, and
  where do they appear in OWNERS files.

  Sources:
  - GitHub user API for company / profile
  - config/<org>/org.yaml (Members / Admins) for k8s org membership
  - cs.k8s.io (hound) for OWNERS file references

  Behavior:
  - Honors GITHUB_TOKEN / GH_TOKEN to avoid the 60/hr unauth limit
  - Per-request context with a 30s timeout; SIGINT cancels in flight
  - Multi-user batches run concurrently (errgroup, bounded to 4) with
    output preserved in input order
  - One bad username does not kill the batch; per-user errors render
    and the process exits non-zero
  - Hound failures degrade to a warning instead of dropping org info
  - OWNERS results render as an aligned REPO / PATH / URL table; URL
    uses /blob/HEAD/ so the link resolves to the default branch
  - `--output json` for scripting

  Dependencies:
  - google/go-github v17 (untagged) -> v88
  - spf13/cobra v0.0.5 -> v1.10.2 (for ExecuteContext)
  - adds golang.org/x/sync for errgroup
  - go directive bumped to 1.22+

  Review fixes:
  - OWNERS/OWNERS_ALIASES search now matches "- <user>" as a literal
    YAML list item and skips commented-out lines, cutting false
    positives from prose mentions or substring matches
  - Each hit is further confirmed against the file's real content via
    `gh api` to exclude emeritus-only entries; toggle with
    --verify-owners
  - Fixed a double error-print in main() and dropped the unused ctx
    param on newGitHubClient
  - JSON output no longer silently drops per-user failures (entries
    now carry username + error instead of vanishing)
  - Copyright headers normalized to match repo convention

  Review fixes (round 2):
  - The "- <user>" match now requires the YAML list item to equal the
    username exactly, closing a substring false-positive gap (e.g.
    "- alice-bot" matching a search for "alice") that only mattered
    with --verify-owners=false
  - JSON per-user error entries no longer assume errs[i] is non-nil
  - Added coverage for the default text-mode renderer and for a
    mixed-batch run (success + failure users together) to exercise
    output ordering

Signed-off-by: Nabarun Pal <pal.nabarun95@gmail.com>

Author: palnabarun

cmd/korg/korg.go

@@ -17,10 +17,13 @@ limitations under the License.
 package main
 
 import (
+	"context"
 	"fmt"
 	"os"
+	"os/signal"
 	"path/filepath"
 	"strings"
+	"syscall"
 
 	"github.com/spf13/cobra"
 )
@@ -58,6 +61,27 @@ Note: Removing from teams is currently unsupported.
 	`
 
 	auditHelpText = "Audit GitHub org members"
+
+	userinfoHelpText = `
+Gets k8s org membership, GitHub profile, and OWNERS file references for user(s).
+
+Honors GITHUB_TOKEN / GH_TOKEN for authenticated GitHub API access.
+
+A failed per-user lookup does not omit that user from the output: in text mode
+it renders an ERROR block, and in JSON mode it appears with only "username"
+and "error" populated. Check the exit code to detect any failures.
+
+By default, each OWNERS/OWNERS_ALIASES hit is confirmed against the file's
+actual content (via the gh CLI) to exclude emeritus-only entries; this costs
+one "gh api" call per hit and requires the gh CLI to be installed and
+authenticated. Pass --verify-owners=false to skip this and use hound's raw
+search hits as-is.
+
+	korg userinfo <github username>
+	korg userinfo <github username1> <github username2> <github username3> ...
+	korg userinfo --output json <github username>
+	korg userinfo --verify-owners=false <github username>
+	`
 )
 
 type Options struct {
@@ -222,7 +246,32 @@ func main() {
 	rootCmd.AddCommand(removeCmd)
 	rootCmd.AddCommand(auditCmd)
 
-	if err := rootCmd.Execute(); err != nil {
+	var (
+		outputFormat string
+		verifyOwners bool
+	)
+	userInfoCmd := &cobra.Command{
+		Use:   "userinfo",
+		Short: "Get information about user(s)",
+		Long:  userinfoHelpText,
+		Args:  cobra.MinimumNArgs(1),
+		RunE: func(cmd *cobra.Command, args []string) error {
+			switch outputFormat {
+			case "text", "json":
+			default:
+				return fmt.Errorf("invalid --output %q (want: text, json)", outputFormat)
+			}
+			return runUserinfo(cmd.Context(), o.RepoRoot, args, outputFormat == "json", verifyOwners, cmd.OutOrStdout())
+		},
+	}
+	userInfoCmd.Flags().StringVarP(&outputFormat, "output", "o", "text", "output format: text|json")
+	userInfoCmd.Flags().BoolVar(&verifyOwners, "verify-owners", true, "confirm each OWNERS/OWNERS_ALIASES hit via the gh CLI and exclude emeritus-only entries; requires gh to be installed and authenticated")
+	rootCmd.AddCommand(userInfoCmd)
+
+	ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
+	defer stop()
+
+	if err := rootCmd.ExecuteContext(ctx); err != nil {
 		os.Exit(1)
 	}
 }