fix(ci): harden Codex review invocation

Co-Authored-By: Codex <noreply@openai.com>

Author: Pigbibi

.github/workflows/codex_pr_review.yml

@@ -22,7 +22,8 @@ jobs:
       allow_unconfigured_backend: false
       api_fallback_enabled: "false"
       direct_api_primary_enabled: "false"
-    secrets: inherit
+    secrets:
+      CODEX_AUDIT_SERVICE_URL: ${{ secrets.CODEX_AUDIT_SERVICE_URL }}
     permissions:
       contents: read
       id-token: write

.github/workflows/codex_review_gate.yml

@@ -23,7 +23,7 @@ permissions:
   pull-requests: read
 
 concurrency:
-  group: codex-review-gate-${{ github.event.pull_request.number }}
+  group: codex-review-gate-${{ github.event.pull_request.number }}-${{ github.event_name }}
   cancel-in-progress: true
 
 jobs: