feat: implement issue #2235 — CI Failure Analyst never runs for failed GitHub Actions jobs: the check_run trigger only fires for third-party checks
Problem
CI Failure Analyst never runs for failed GitHub Actions jobs: the check_run trigger only fires for third-party checks
From the issue: CI Failure Analyst is documented as diagnosing failed CI, Lint and Test runs. In practice it never runs for a failed GitHub Actions job, in any repo, on any release. It only runs when a third-party app's check fails.
Risk
Medium — changes GitHub Actions workflow behavior, which is exercised only post-merge; verify via the affected workflow runs.
Test plan
Tests added/updated: tests/aw/ci-failure-analyst/scenarios.md,tests/ci_failure_analyst_resolve.bats. Verification: bash scripts/dev-lead-lint.sh (shellcheck --severity=warning) ran pre-commit; the bats suite runs in CI.
Rollback
Revert this PR. No non-revertible side effects (no tags, migrations, or external state).
Monitoring
Watch the affected workflow run(s) in the Actions tab and this PR's Lint check for regressions.
Refs #2235. This PR delivers criteria 1 and 3 of that issue: the reusable accepts a check_run or a workflow_run payload. The stub trigger (criterion 2) and the live proof (criterion 4) follow in a second PR once ci-failure-analyst/v1-stable carries this reusable, so the issue stays open after this merges. The change is inert until a channel is cut.