PROD-041 Add a safe AI-assisted PR review workflow for Hyperbet

[rndrntwrk]

Canonical source: docs/release/github-project-production-backlog.md

Epic: Repository Governance, Review Automation, And OSS Housekeeping

• ID: PROD-041
• Title: Add a safe AI-assisted PR review workflow for Hyperbet
• Type: feature
• Priority: P1
• Scope: active
• Area: review-automation
• Description: Add an AI code-review workflow that improves reviewer throughput
  without turning the repo into an agent-governed system or exposing the repo
  to unsafe workflow patterns.
• Acceptance criteria:
  • one primary AI reviewer is selected for Hyperbet PR review automation
  • the workflow is read-first, comment-only, and does not auto-close, auto-merge,
    or self-approve PRs
  • external-contributor safety is explicit: no unsafe pull_request_target
    secret exposure, no broad write tokens, no unrestricted tool access
  • human CODEOWNER approval remains mandatory for protocol, security, release,
    and workflow changes
• Dependencies: PROD-039, PROD-046
• Source docs: tracking-document-map.md,
  external benchmarks: HyperscapeAI/hyperscape/.github/workflows/claude-code-review.yml,
  milady/.github/workflows/agent-review.yml
• Suggested owner: infra
• Blocker class: quality-blocking