Trigger & Permissions Check
Phase 1: Event PR
#developer opens or updates
The workflow grants the runner temporary API credentials via permissions: pull-requests: write, allowing the runner to comment on the PR thread without requiring hardcoded personal access tokens
