feat: add monthly org profile README rotation

.github/CODEOWNERS

@@ -1,3 +1,5 @@
 .github/ @nvidia-nemo/automation
 profile/ @bernardwin @ericharper @euronymous-aithal @snowmanwwg
 README.md @bernardwin @ericharper @euronymous-aithal @snowmanwwg
+scripts/ @nvidia-nemo/automation
+rotation/ @nvidia-nemo/automation

.github/workflows/rotate-profile-readme.yml

@@ -0,0 +1,92 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+# http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+name: Rotate org profile README
+
+on:
+  schedule:
+    # Mondays 14:00 UTC. The first run of each month is the first Monday, which starts
+    # that month's rotation; later runs only refresh the catalog and reuse the selection.
+    - cron: "0 14 * * 1"
+  pull_request:
+    # Exercises the script on a real runner; never commits.
+    paths:
+      - ".github/workflows/rotate-profile-readme.yml"
+      - "scripts/**"
+      - "rotation/**"
+      - "profile/**"
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: "Print the selection without committing"
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+
+concurrency:
+  group: rotate-profile-readme
+  cancel-in-progress: false
+
+jobs:
+  rotate:
+    runs-on: ubuntu-latest
+    env:
+      PUSH: ${{ github.ref == 'refs/heads/main' && (github.event_name == 'schedule' || (github.event_name == 'workflow_dispatch' && !inputs.dry_run)) }}
+    steps:
+      # The push to main is made by the nemo-automation-bot app, which is allowed to
+      # bypass the pull request requirement. GITHUB_TOKEN stays read-only.
+      - name: Create bot token
+        id: bot
+        if: ${{ env.PUSH == 'true' }}
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
+        with:
+          app-id: ${{ vars.BOT_ID }}
+          private-key: ${{ secrets.BOT_KEY }}
+          permission-contents: write
+
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          token: ${{ steps.bot.outputs.token || github.token }}
+
+      - name: Render README and catalog
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DRY_RUN: ${{ env.PUSH != 'true' && '1' || '' }}
+        run: python3 scripts/rotate_readme.py ${DRY_RUN:+--dry-run}
+
+      - name: Commit and push
+        if: ${{ env.PUSH == 'true' }}
+        env:
+          GH_TOKEN: ${{ steps.bot.outputs.token }}
+          BOT_SLUG: ${{ steps.bot.outputs.app-slug }}
+        run: |
+          git add profile rotation
+          if git diff --cached --quiet; then
+            echo "No changes to commit"
+            exit 0
+          fi
+          bot_id=$(gh api "/users/${BOT_SLUG}[bot]" --jq .id)
+          git config user.name "${BOT_SLUG}[bot]"
+          git config user.email "${bot_id}+${BOT_SLUG}[bot]@users.noreply.github.com"
+          git commit -m "chore: rotate org profile README ($(date -u +%Y-%m))"
+          for attempt in 1 2 3; do
+            git push && exit 0
+            echo "Push attempt ${attempt} failed; rebasing on origin/${GITHUB_REF_NAME}"
+            git fetch origin "${GITHUB_REF_NAME}"
+            git rebase "origin/${GITHUB_REF_NAME}"
+          done
+          echo "Push failed after 3 attempts" >&2
+          exit 1

profile/README.md

@@ -0,0 +1,33 @@
+### Featured repositories · November 2026
+
+<table>
+  <tr>
+    <td width="50%" valign="top">
+      <h3><a href="https://github.com/NVIDIA-NeMo/Safe-Synthesizer">NeMo Safe Synthesizer</a></h3>
+      <p>🛡️ NeMo Safe Synthesizer: Create private, safe versions of sensitive tabular datasets.</p>
+    </td>
+    <td width="50%" valign="top">
+      <h3><a href="https://github.com/NVIDIA-NeMo/Switchyard">NeMo Switchyard</a></h3>
+      <p>Switchyard lets LLM applications route traffic across models and providers while preserving native OpenAI and Anthropic API compatibility - enabling flexible model selection, benchmarking, and cost/performance optimization.</p>
+    </td>
+  </tr>
+  <tr>
+    <td width="50%" valign="top">
+      <h3><a href="https://github.com/NVIDIA-NeMo/eval-author">NeMo Eval Author</a></h3>
+      <p>Research preview: skills that help your coding assistant build evaluations for custom agents, assess the quality of existing suites, and find behavior-coverage gaps. Works today with NeMo Gym and Harbor.</p>
+    </td>
+    <td width="50%" valign="top">
+      <h3><a href="https://github.com/NVIDIA-NeMo/labs-molt">NeMo Labs Molt</a></h3>
+      <p>A scalable, agentic-first, and HuggingFace-native RL framework for research (9k lines).</p>
+    </td>
+  </tr>
+  <tr>
+    <td width="50%" valign="top">
+      <h3><a href="https://github.com/NVIDIA-NeMo/Lens">NeMo Lens</a></h3>
+    </td>
+    <td width="50%" valign="top">
+      <h3><a href="https://github.com/NVIDIA-NeMo/Nemotron">Nemotron</a></h3>
+      <p>Developer Asset Hub for NVIDIA Nemotron — A one-stop resource for training recipes, usage cookbooks, datasets, and full end-to-end reference examples to build with Nemotron models</p>
+    </td>
+  </tr>
+</table>

profile/README.template.md

@@ -0,0 +1,3 @@
+### Featured repositories · {{month_year}}
+
+{{featured_cards_html}}