ci: add agent-shield.yml workflow

[don-petry]

Summary

• Adds .github/workflows/agent-shield.yml copied verbatim from the org standards template at petry-projects/.github/standards/workflows/agent-shield.yml
• Resolves the compliance finding for missing-agent-shield.yml

Closes #50

---

Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Added automated workflow validation for pull requests and push events to the main branch.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: ef5c335b-f97f-489b-98c2-aac46650277c

📥 Commits

Reviewing files that changed from the base of the PR and between 5042df9 and 3a10d95.

📒 Files selected for processing (1)

• .github/workflows/agent-shield.yml

---

📝 Walkthrough

Walkthrough

A new GitHub Actions workflow file agent-shield.yml is added to satisfy a compliance requirement. The workflow triggers on push and pull_request events targeting the main branch, grants minimal read-only permissions, and delegates all logic to a centralized reusable workflow from the petry-projects/.github repository.

Changes

AgentShield Workflow Setup

Layer / File(s)	Summary
Workflow Configuration .github/workflows/agent-shield.yml	New AgentShield workflow added with push and pull_request triggers for main branch, minimal contents: read permission, and a job that calls the centralized reusable workflow petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and accurately describes the main change: adding a new GitHub Actions workflow file for agent-shield.
Linked Issues check	✅ Passed	The PR successfully addresses the compliance requirement in issue #50 by adding the required agent-shield.yml workflow file to the repository.
Out of Scope Changes check	✅ Passed	All changes are directly scoped to resolving the compliance finding; only the agent-shield.yml workflow file was added with no extraneous modifications.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch claude/issue-50-20260508-1409

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Adds the org-standard AgentShield workflow to bring this repo into compliance with the required CI workflows list (resolving the missing-agent-shield.yml finding and closing #50).

Changes:

• Added .github/workflows/agent-shield.yml as a thin caller that invokes the org reusable workflow petry-projects/.github/.github/workflows/agent-shield-reusable.yml@v1.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.