[q4rk]

This PR adds detailed comments to gemini-review.yml to explain:

• Security guardrails (forks vs authorized users).
• envsubst usage for variable resolution.
• Acknowledgment reactions.

TAG=agy
CONV=e5a8f383-17d7-4507-8e6c-1d4377448630

[github-actions]

This PR introduces significant improvements to the gemini-review.yml workflow. The added comments greatly enhance readability, and the detailed security guardrails are a crucial addition for preventing unauthorized execution. The envsubst fix for placeholder resolution is particularly important for ensuring correct context is passed to the model, preventing potential mis-reviews. Overall, these changes make the workflow more robust, secure, and understandable. Great work!

[github-actions]

📋 Review Summary

This Pull Request enhances the gemini-review workflow by adding clearer documentation within PROMPT.md and gemini-review.yml. It clarifies the role of environment variables and the extraction of additional context from comments.

🔍 General Feedback

• The changes improve the readability and maintainability of the workflow configuration.
• The addition of /pr-code-review to the prompt ensures explicit command invocation.

[github-actions]

📋 Review Summary

This Pull Request effectively improves the clarity and maintainability of the gemini-review.yml workflow and the PROMPT.md file. The changes in PROMPT.md align with best practices for envsubst variable handling, and the added comments in the workflow file enhance understanding of its logic.

🔍 General Feedback

• The refactoring of PROMPT.md by integrating the <CONTEXT> and <PROTOCOL> sections directly into the main content streamlines the prompt structure, making it more self-contained and easier to parse.
• The conversion of ${VAR} to $VAR in PROMPT.md is a good improvement for consistency with envsubst and was also a suggestion in an earlier, now outdated, review comment.
• The added comments in gemini-review.yml provide valuable insights into the ADDITIONAL_CONTEXT extraction logic and the purpose of adding /pr-code-review to the prompt, which will aid future maintenance and understanding.