Merge pull request #3684 from deepseek-harness/turtle/custom-review-ownership

chore: automate changed-file review ownership

.github/workflows/request-review.yml

@@ -0,0 +1,32 @@
+name: request-review
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened, ready_for_review]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+concurrency:
+  group: request-review-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  request-review:
+    name: request-review
+    if: ${{ !github.event.pull_request.draft }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      # SECURITY: the write-capable job executes policy from the trusted default
+      # branch and reads pull-request filenames only as API data.
+      - name: Check out trusted review policy
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          ref: ${{ github.event.repository.default_branch }}
+          persist-credentials: false
+      - name: Request reviewers
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: node .github/review-ownership/request-review.mjs