chore: add AI code review workflow

[Daltonganger]

Summary

• add the shared AI Code Review workflow
• configure the workflow to use the Codex provider in English
• point workflow usage at Daltonganger/AI-Code-Review@v1.4.0

[github-actions]

⚠️ AI Code Review Skipped

No codex API key provided. Please configure CODEX_API_KEY to enable AI-powered code review.

---

_{🤖 This is an automated review. To reduce noise, consider muting notifications for this bot.}

[github-actions]

⚠️ AI Code Review Skipped

No codex API key provided. Please configure CODEX_API_KEY to enable AI-powered code review.

---

_{🤖 This is an automated review. To reduce noise, consider muting notifications for this bot.}

[kilo-code-bot]

Code Review Roast 🔥

Verdict: 3 Issues Found | Recommendation: Address before merge

Overview

Severity	Count
🚨 critical	0
⚠️ warning	2
💡 suggestion	1
🤏 nitpick	0

Issue Details (click to expand)

File	Line	Roast
.github/workflows/ai-code-review.yml	15	Missing checkout step — the action will review an empty directory
.github/workflows/ai-code-review.yml	3	No concurrency control — rapid PR pushes will stack up review jobs
.github/workflows/ai-code-review.yml	9	No timeout-minutes — a hung API call becomes a zombie job

---

🏆 Best part: Clean YAML structure and proper use of secrets for the API key. Oh wait, this part is actually well-organized. I need to sit down.

💀 Worst part: No actions/checkout@v4 step. Your AI reviewer will be staring at an empty workspace like a detective showing up to a crime scene after the cleanup crew left.

📊 Overall: Like ordering a pizza delivery but forgetting to give them your address — the intention is there, the execution has a critical gap.

Files Reviewed (1 file)

• .github/workflows/ai-code-review.yml - 3 issues

Fix these issues in Kilo Cloud

[kilo-code-bot]

⚠️ Missing checkout step

The workflow jumps straight to the AI Code Review action without checking out the repository first. Most code review actions need access to the actual source files to do their job.

Add this before the review step:

      - name: Checkout
        uses: actions/checkout@v4

[kilo-code-bot]

💡 No concurrency control

Unlike your CI workflow which has concurrency to cancel in-progress runs, this workflow will stack up review jobs if someone pushes multiple commits in quick succession.

Consider adding:

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

[kilo-code-bot]

⚠️ No timeout-minutes

If the external API hangs or is slow, this job will run until GitHub's default 6-hour timeout kills it. That's a lot of wasted Actions minutes.

Add a reasonable timeout:

    timeout-minutes: 10