• Merge pull request #1004 from kaitranntt/kai/feat/1003-pr-agent-self-hosted-migration
• test(tokens): isolate auth rotation from mocked handlers
• fix(ci): restore trusted PR review dispatch
• fix(ci): preserve AI review variable contract
• fix(ci): restrict self-hosted PR-Agent comment triggers
• feat(ci): migrate AI review to self-hosted PR-Agent
• Merge pull request #989 from kaitranntt/kai/fix/984-tokens-api-key-regenerate-secret
• fix: apply api-key updates during token regeneration