[jmarek41]

Projects now call one workflow for the code review and pass the Slack webhook to their build workflows instead of adding their own jobs and conditions.

universal-cloud-ai-pr-review

• Also re-evaluates the review-gate status on pull_request_target and pull_request_review events (the former universal-cloud-review-gate). Each job picks its own events, so the caller needs no if:. With a single caller job, no skipped check run is ever named review-gate.
• CLAUDE_CODE_OAUTH_TOKEN is optional, so secrets: inherit works for bot-authored PRs too. The review step still fails without it.
• plugin and skill_path are optional and are read from the marketplace manifest (skills/<skill-name> in the plugin's directory).
• reviewer falls back to the caller's PROJECT_REVIEWER variable.

ios-selfhosted-nightly-build / ios-selfhosted-on-demand-build

• New optional secret SLACK_WEBHOOK_FEATURE_REVIEW. With it, a notify_feature_review job announces the feature-complete PRs in the build (the former universal-cloud-feature-review-notify).
• The message mentions the PROJECT_REVIEWER login's Slack ID from the SLACK_USER_IDS variable ({"login": "U0123456"}).

Removed: universal-cloud-review-gate.yml and universal-cloud-feature-review-notify.yml. Both were new in 2.8.0, and their only callers move to the workflows above.

The caller now looks like this:

jobs:
  review:
    uses: futuredapp/.github/.github/workflows/universal-cloud-ai-pr-review.yml@<version>
    with:
      marketplace_repository: <owner>/<marketplace>
      skill: <plugin>:<skill>
    secrets: inherit

Tested from this branch on a consumer PR. The skill was resolved from the manifest, the review ran without permission denials, and the comment and gate were posted. actionlint and the bats suites pass.