- Restrict invoke and review triggers purely to explicit user comments.
- Enforce strict author association verification (OWNER, MEMBER, COLLABORATOR).
- Enforce strict targeting assertion to ensure pull requests act on the main branch.
- Synchronize prompt constraints and GitHub action tools with the community catalog.
- Refine action API key options to uniformly target secrets.GOOGLE_API_KEY.
Co-authored-by: Shangjie Chen <deanchen@google.com>
PiperOrigin-RevId: 915654346
Shangjie Chen
27e71f3bcf