Mobilint shared GitHub automation

This repository provides Mobilint's shared GitHub workflow templates and centrally managed Codex pull-request review policy.

Consumer repositories use a small .github/workflows/code-review.yml caller. Review limits, trust checks, official-Codex fallback behavior, reactions, sandbox policy, and runner selection remain in the central reusable workflow, so routine policy updates do not require hand-editing every repository.

The managed caller supports:

• automatic review for trusted pull-request authors;
• direct @mobilint-review requests in PR comments, review comments, and submitted review bodies;
• temporary 👀 acknowledgement followed by a review, visible error, or 👍 for a clean result;
• central P0/P1/P2 review findings on the self-hosted Codex reviewer.

The official workflow template is workflow-templates/code-review.yml. Mobilint maintainers copy this caller into consumer repositories. The manifest and local audit tool help detect drift, but no unattended cross-repository credential workflow is installed.

Maintainers should use the automation operations guide for architecture, enrollment, manual synchronization, validation, release, and rollback procedures.