.github: harden codegenie review (key preflight, CLAUDE_API_KEY, config)

[pratikspatil024]

Summary

Follow-up to #2320, which added the initial CodeGenie review workflow. That workflow referenced ANTHROPIC_API_KEY_GITHUB_ACTIONS, which is not provisioned for bor — so triggered reviews failed with a generic config_error. This PR fixes that and adds config.

Validated end-to-end on a throwaway test PR (#2322): with CLAUDE_API_KEY, CodeGenie authenticated and posted a full review + inline comments. With the old/repo-local ANTHROPIC_API_KEY it failed the LLM call (stale/model-restricted key).

Changes:

• Preflight guard — a first step that fails fast with a clear error (CLAUDE_API_KEY is missing or empty for this repo) instead of a buried config_error.
• Key — point llm-api-key at the org-wide CLAUDE_API_KEY (resolves for bor; the org-wide ANTHROPIC_API_KEY_GITHUB_ACTIONS Peter referenced is not scoped here).
• codegenie.toml — skip generated code (gencodec gen_*.go, *.pb.go, mocks, generated CLI docs) and mark consensus-critical zones (consensus, miner, core/vm, params, core/txpool, core/state, core/blockstm) per .claude/rules.

Trigger stays comment-only (codegenie review) as set in #2320 — no auto-review on open/push.

Executed tests

• Ran the workflow from a test branch via a pull_request lane (temporary scaffold on codeginie-test, not included here) against PR [teat] v2.9.1 to develop #2322. Result: preflight ✅, CodeGenie ✅, review report + 2 inline comments posted. Run: https://github.com/0xPolygon/bor/actions/runs/30104342882
• Confirmed the comment-only workflow itself has no auto-triggers.

Rollout notes

Not consensus-affecting. CI-only. No coordinated upgrade. Non-blocking review lane — no required status check added. Inert until merged to develop (comment triggers resolve from the default branch).

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review for a one-time review, or @claude review always to subscribe this PR to a review on every future push.

_{Tip: disable this comment in your organization's Code Review settings.}

[Copilot]

Pull request overview

This PR hardens the on-demand CodeGenie PR review workflow in .github/ by ensuring the correct LLM secret is used for this repo, failing fast when it’s missing, and adding a repository-scoped codegenie.toml to better classify/skip generated code and prioritize consensus-critical paths.

Changes:

• Add an early workflow preflight step that errors clearly when CLAUDE_API_KEY is missing/empty.
• Switch CodeGenie to use the org-provisioned CLAUDE_API_KEY secret for llm-api-key.
• Introduce codegenie.toml with skip rules for generated code and critical-priority classifications for consensus/EVM/state/txpool/hardfork-related directories.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/codegenie-review.yml	Adds API-key preflight and updates the action input to use CLAUDE_API_KEY for CodeGenie authentication.
codegenie.toml	Adds repository CodeGenie classification rules to skip generated code and prioritize consensus-critical areas.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.07%. Comparing base (abb8465) to head (1334d79).
⚠️ Report is 1 commits behind head on develop.

Additional details and impacted files

@@             Coverage Diff             @@
##           develop    #2324      +/-   ##
===========================================
+ Coverage    54.05%   54.07%   +0.02%     
===========================================
  Files          907      907              
  Lines       162012   162012              
===========================================
+ Hits         87578    87612      +34     
+ Misses       69017    68992      -25     
+ Partials      5417     5408       -9     

see 23 files with indirect coverage changes
see 23 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.