soa-pr-reviewlisted

# AI Code Review Supported external review agents: `coderabbit`, `qodo`, `greptile`, `sonarqube`. Other vendors are unsupported unless repo policy adds them. ## Boundary The orchestrator owns polling cadence, state transitions, artifact persistence, and auto-recording `clean` on the final check. After `record-review`, it also **git-commits** the updated review JSON artifacts when running in a normal git checkout so the triage file is not left dirty on disk. This skill owns: fetching review data with `gh`, detection logic, normalizing comments into structured artifacts, and triage judgment. Contract: - fetcher outputs: `detected`, `agents`, `reviewed_head_sha`, `vendors`, `comments` - triager outputs: `outcome` (`clean|needs_patch|patched`), `note`, `action_summary`, `non_action_summary`, `vendors` When triager returns `needs_patch`, follow-up must conclude as `patched` or `operator_input_needed` — not stop permanently at `needs_patch`. ## Workflow 1. Resolve PR number with `gh pr view` if not provided. 2. Fetch with `.agents/skills/pr-review/scripts/fetch_pr_review_comments.sh <pr-number>`. 3. If orchestrator already saved `review.fetch.json`, use that as the source of truth for vendor attribution and comment shape. 4. Detection policy: supported vendor identities, explicit vendor wording in comment body, check-run annotations. Human drive-by comments do not count. Preserve head SHA, inline resolution/outdated state, and native thread identity. 5. Return fetcher cont