Bootstrap Review gate required context on master

[lamemustafa]

Problem

PR #58 is verified and has a current-head Codex review, but it cannot merge because the protected master ruleset already requires the Review gate status context. The secure pull_request_target Review findings gate workflow that writes that status is introduced by PR #58, so it cannot create the required context until after the PR lands on master.

Current evidence

• PR: ci: harden Pack review gate #58
• Head: cad6f8b
• Normal checks passing: Verify extension, CodeQL/Analyze, title check, GitGuardian.
• Current-head chatgpt-codex-connector review exists on cad6f8b.
• No unresolved review threads were found in the latest GraphQL review-thread read.
• Required Review gate status is absent because the trusted status-writer workflow is not on master yet.

Acceptance criteria

• Choose an explicit owner-approved bootstrap path, such as temporarily removing only the Review gate required context, merging ci: harden Pack review gate #58, then restoring the requirement after the workflow exists on master.
• Do not remove Verify extension, conversation resolution, linear history, or PR-required protections.
• After ci: harden Pack review gate #58 lands, confirm a new PR receives a GitHub-Actions-owned Review gate status from default-branch workflow code.
• Restore/confirm the long-term ruleset requires both Verify extension and Review gate.

Verification

• gh pr checks 58 --repo lamemustafa/pack --watch=false
• gh api repos/lamemustafa/pack/rules/branches/master
• GraphQL reviewThreads read for ci: harden Pack review gate #58 shows no unresolved threads before merge.