Feat: Automatic AI PR review

[dzikowski]

No description provided.

[HarK-github]

I think the implementation of the pr variable is vulnerable to shell injection. (docs:https://securitylab.github.com/resources/github-actions-untrusted-input/#:~:text=Script%20injections,not%20vulnerable%20to%20the%20injection.)
Better to use the env var, not the ${{ }} syntax.

Suggested change

	run: |
	set -euo pipefail
	pr="${{ inputs.pr_number }}"
	review_file=".jaiph/tmp/${pr}-review.md"
	test -f "${review_file}"
	# temporary: print the review file to the console
	# gh pr comment "${pr}" --body-file "${review_file}"
	cat "${review_file}"
	rm "${review_file}"
	env:
	# map input to an environment variable
	PR_NUMBER: ${{ inputs.pr_number }}
	run: |
	set -euo pipefail
	# use the env var, not the ${{ }} syntax
	pr="$PR_NUMBER"
	review_file=".jaiph/tmp/${pr}-review.md"
	if [[ -f "$review_file" ]]; then
	cat "$review_file"
	rm "$review_file"
	else
	echo "Review file not found for PR $pr"
	exit 1
	fi