chore: update drain3 default log pattern weights

[github-actions]

This pull request updates the default Drain3 log pattern weights (pkg/agentdrain/data/default_weights.json) by training on the most recent workflow run logs.

What changed

• Re-trained log template clusters from the latest run logs using gh aw logs --train
• Copied resulting drain3_weights.json to the embedded defaults path

How to verify

1. Build the binary with make build
2. Run gh aw audit or gh aw logs --train and confirm the anomaly analysis reflects the updated patterns

This PR was created automatically by the train-drain3-weights workflow.

---

run: https://github.com/github/gh-aw/actions/runs/30787664739

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 11.6 AIC · ⌖ 7.08 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

---

Run: https://github.com/github/gh-aw/actions/runs/30795752759

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 5.07 AIC · ⌖ 5.94 AIC · ⊞ 5.9K · ◷
_{Comment /souschef to run again}

[gh-aw-bot]

@copilot Please refresh this PR for maintainer review: update the branch if needed, rerun the pr-finisher skill, and summarize any remaining blockers.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 11.6 AIC · ⌖ 7.08 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please refresh this PR for maintainer review: update the branch if needed, rerun the pr-finisher skill, and summarize any remaining blockers.

...

Branch refreshed. Here's the status:

• ✅ Reviews — No unresolved review threads.
• ✅ Checks (local) — make fmt, make lint, and make test-unit all pass. Applied a make fmt formatting fix to default_weights.json (canonical single-line JSON arrays + trailing newline) in commit chore: apply make fmt to default_weights.json.
• ❓ Checks (CI) — Stale after agent push; needs human re-trigger. No prior CI failures to root-cause.
• ✅ Mergeable — Open, not draft, not behind main, no conflicts.

Hand-off: A maintainer needs to re-trigger CI (close/reopen the PR, workflow_dispatch, or push) before merging.

[github-actions]

Thanks for this automated update! 🤖 This PR re-trains the Drain3 log pattern weights from recent workflow runs — an important maintenance task that keeps anomaly detection accurate.

What looks good:

• ✅ Focused change (single file, clear purpose)
• ✅ Clear description with verification steps
• ✅ Minimal diff (data-only update)

Note on process: Per our CONTRIBUTING.md, traditional PRs are not enabled for non-core team members — however, this is a bot-generated PR from our internal automation workflows (train-drain3-weights → PR Sous Chef), which appears to be an authorized pattern within our CI/CD infrastructure. Core team: please confirm this automation aligns with your workflow preferences.

For the automation owner: The description is excellent. Just verify the weights reflect the intended training run and that the verification steps pass locally.

Looks ready for review! 🚀

Generated by ✅ Contribution Check · auto · 57.3 AIC · ⌖ 4.5 AIC · ⊞ 8.8K · ◷

[gh-aw-bot]

@copilot Please refresh this PR for maintainer review: update the branch if needed, rerun the pr-finisher skill, and summarize any remaining blockers.

Run: https://github.com/github/gh-aw/actions/runs/30795752759

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 5.07 AIC · ⌖ 5.94 AIC · ⊞ 5.9K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please refresh this PR for maintainer review: update the branch if needed, rerun the pr-finisher skill, and summarize any remaining blockers.

Run: https://github.com/github/gh-aw/actions/r...

PR is ready for maintainer review. Current status:

• ✅ Reviews — No unresolved review threads.
• ✅ Checks (local) — make fmt, make test-unit all pass. No file changes needed this pass.
• ❓ Checks (CI) — Stale after agent push; needs human re-trigger. The run referenced in this comment (30795752759) is the scheduled PR Sous Chef workflow on main, not a CI check on this PR's branch — no product fix required.
• ✅ Mergeable — Open, not draft, not behind main, no conflicts.

Hand-off: A maintainer needs to re-trigger CI (close/reopen PR, workflow_dispatch, or push) before merging.