fix(ai-review): allow github-actions[bot] PRs to be reviewed

codex-action's write-access check queries the collaborators API, which
returns permission 'none' for the github-actions[bot] actor and aborts
the run with "Actor 'github-actions[bot]' is not permitted to run this
action". This blocked AI review on the automated security-fix PRs, which
are opened under the repo's own GITHUB_TOKEN (actor github-actions[bot]).

Pass allow-bots: true so codex-action whitelists the GitHub-owned
github-actions[bot] specifically. The review still posts via the
AI_CODE_REVIEW app token, which already has PR write — the actor check
was the only gate.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: absorbb

.github/workflows/ai-review.yml

@@ -295,6 +295,13 @@ jobs:
           effort: high
           codex-home: .github/codex/home
           sandbox: danger-full-access
+          # Allow reviews on PRs opened by github-actions[bot] (e.g. the
+          # automated security-fix PRs). codex-action's write-access check
+          # queries the collaborators API, which returns 'none' for the bot
+          # actor and aborts the run. allow-bots whitelists the GitHub-owned
+          # github-actions[bot] specifically — it runs under the repo's own
+          # token, so it is repo-internal automation, not an external actor.
+          allow-bots: true
 
       - name: "✅ Validate review output"
         if: ${{ steps.resolve-target.outputs.review_mode == 'commit' }}