ci: label-driven AI re-review (v1.2.9)

[joryirving]

Adding the ai-review label to a PR now forces a re-review: pr-reviewer-action v1.2.9 handles the labeled event natively (skipping unrelated labels) and removes the label after publishing, so re-adding it re-triggers. Labeling is restricted to write/triage, so the trigger is self-authorizing.

This replaces the /ai-review comment-command wiring, which is removed along with its authorization gate; the action pin is bumped to v1.2.9.

🤖 Generated with Claude Code

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: review@https://litellm.jory.dev/v1 (openai) — fast route

Recommendation

Approved. This PR simplifies the AI PR review trigger by moving from a comment-based command (/ai-review) to a label-based trigger (ai-review). This is a cleaner UX and improves security by leveraging GitHub's native label permissions (write/triage) for authorization.

Change-by-change findings

• .github/workflows/ai-pr-review.yaml:
  • Added labeled to the pull_request event types to support the new trigger.
  • Removed the issue_comment event type and the associated logic for parsing comment bodies.
  • Removed the Check out re-review command gate and Authorize re-review command steps, which were used to validate the /ai-review comment.
  • Removed the Acknowledge authorized re-review step (which added a rocket reaction to the comment).
  • Updated the Review PR with reusable AI reviewer step to use the new misospace/pr-reviewer-action@v1.2.9 (pinned to SHA 4126a2701a5e9adcf7c48ac6eb678e2e3a2bb2a0) and removed the force_review parameter as the trigger is now event-driven via labels.
  • Updated concurrency group to use github.ref as a fallback to ensure correct grouping when the event is not a standard pull_request event.

Standards Compliance

• Security: The authorization mechanism is improved. Instead of parsing text in a comment, it now relies on GitHub's permission model for labels (only users with write or triage permissions can trigger a re-review by adding the label).
• CI/CD: The PR updates the pinned version of the pr-reviewer-action to v1.2.9, which is consistent with the PR's stated purpose.
• Code Standards: The removal of complex shell scripts and manual comment parsing reduces the surface area for potential bugs in the CI pipeline.