ci: use central Codex PR review workflow

Author: Pigbibi

.github/workflows/codex_pr_review.yml

@@ -1,7 +1,5 @@
 name: Codex PR Review
 
-# Always run on PRs to guarantee a check run exists for branch protection.
-# The Python script handles skip logic internally for trivial changes.
 on:
   pull_request:
     types: [opened, synchronize, reopened]
@@ -18,36 +16,13 @@ concurrency:
 
 jobs:
   review:
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    env:
-      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: "true"
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-
-      - name: Set up Python
-        uses: actions/setup-python@v6
-        with:
-          python-version: "3.11"
-
-      - name: Run Codex PR Review
-        id: review
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
-          ANTHROPIC_MODEL: ${{ vars.ANTHROPIC_MODEL || 'claude-sonnet-4-6' }}
-          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
-          OPENAI_MODEL: ${{ vars.OPENAI_MODEL || 'gpt-5.4-mini' }}
-          CODEX_AUDIT_SERVICE_URL: ${{ secrets.CODEX_AUDIT_SERVICE_URL }}
-          CODEX_AUDIT_SERVICE_AUDIENCE: ${{ vars.CODEX_AUDIT_SERVICE_AUDIENCE || 'quant-codex-audit' }}
-        run: python python/scripts/run_codex_pr_review.py
-
-      - name: Upload review diagnostics
-        if: always()
-        uses: actions/upload-artifact@v7
-        with:
-          name: codex-pr-review-${{ github.event.pull_request.number }}-${{ github.run_id }}
-          path: data/output/codex_pr_review/
-          if-no-files-found: warn
+    uses: QuantStrategyLab/AIAuditBridge/.github/workflows/codex_pr_review.yml@main
+    with:
+      caller_concurrency_key: pr-${{ github.event.pull_request.number || github.run_id }}
+      allow_unconfigured_backend: true
+    secrets: inherit
+    permissions:
+      contents: read
+      id-token: write
+      issues: write
+      pull-requests: write

docs/ARCHITECTURE.md

@@ -38,7 +38,6 @@ platform-config.json  (single source of truth)
 │   │   ├── check_internal_dependency_matrix.py
 │   │   ├── gate_codex_app_review.py     # PR merge gate
 │   │   ├── inject_platform_config.py    # Inject config into index.html
-│   │   ├── run_codex_pr_review.py       # Codex AI PR review
 │   │   └── sync_strategy_switch_page_asset.py
 │   ├── tests/                           # Python unit tests
 │   │   ├── test_runtime_settings.py
@@ -74,7 +73,7 @@ platform-config.json  (single source of truth)
     ├── validate.yml                     # Python + JS validation (split jobs)
     ├── deploy-strategy-switch-console.yml
     ├── manual-strategy-switch.yml
-    ├── codex_pr_review.yml
+    ├── codex_pr_review.yml             # Reusable caller to AIAuditBridge
     └── codex_review_gate.yml
 ```