chore: add independent PR review fallback

[DevVig]

This adds a manual local fallback when an authorized CodeRabbit review is unavailable, while preserving the repository's existing checks and release approvals. Prefer one completed CodeRabbit review; retain actual cooldown/error evidence and use a fresh independent Codex review. Bugbot remains optional only with verified existing authorization.

The repository runbook, AGENTS guidance and selectable PR evidence template record the exact candidate SHA, full changed-path coverage and findings disposition. The Python helper rejects stale, skipped/failed, incomplete, self-review and reused evidence. Sensitive changes require an additional independent review and targeted tests. No runtime files or existing workflows change.

Validation at 48cf44c313cfbb198b99b886834780d898b0bc9f:

• python3 -B -m unittest discover -s scripts/review -p 'test_*.py' -v: 21 tests passed.
• Separate Codex Standards and Spec reviewers inspected all six changed paths and accepted the finding fixes; no outstanding findings or changed-path coverage gaps. Shared rollout scope SHA256: b3f387d1a191d60857b31a4d19315894acfaa20585dc1d2a9466805da0595c0f.
• Base comparison: fcd0aba7a4fa360ca8690681bd7b049fa3682f10...48cf44c313cfbb198b99b886834780d898b0bc9f. Saved local reports/test output retain exact SHAs and hashes.

This is a draft setup PR. Existing application CI, native checks, security and acceptance gates still require their normal evidence before merge; they were not run by this helper-only validation. The helper becomes available after acceptance and runs only when an operator invokes it. No new required GitHub check, bot app, credential, permission, subscription or protection setting is enabled. Production deployment approval stays separate. Review evidence is not merge approval.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}