Remove the deadlocking production-review-gate (keep Copilot review advisory)

[autholykos]

Why

The production-review-gate ruleset enforced a required workflow demanding "Copilot reviewed the current HEAD." It deadlocked every tier=production PR and forced admin-bypass on every merge. It is unachievable in this environment:

1. Required workflows run only on pull_request/merge_group — GitHub ignores the pull_request_review trigger, so the gate fired once at push (before Copilot reviewed the new HEAD) and never re-ran. It also declared pull_request_review_thread, which is a webhook event but not a valid Actions trigger.
2. Copilot does not auto-review on push here (review_on_push does not fire) — nothing turns the check green.
3. A review-triggered re-run is approval-gated — the Copilot bot is the triggering actor, so the run is action_required and never executes.

What

• apply-org-policy.sh: stop creating production-review-gate; idempotently delete any stale copy. Keep production-copilot-review (advisory).
• Remove the now-unused required-copilot-review-gate.yml wrapper and the reusable copilot-review-gate.yml.
• ORG-POLICY.md: document the removal and the reasons.

The live production-review-gate ruleset has already been deleted via the API; this captures it as code so re-running apply-org-policy.sh won't resurrect it.

Native required_review_thread_resolution (in production-main) still enforces thread resolution and re-evaluates instantly with no workflow involved.

🤖 Generated with Claude Code

[Copilot]

Pull request overview

This PR removes the org ruleset-based “Copilot reviewed HEAD” required-workflow gate that was deadlocking tier=production pull requests, while keeping Copilot review enabled as an advisory signal and documenting the rationale.

Changes:

• Updates scripts/apply-org-policy.sh to stop creating production-review-gate and to delete any stale instance, keeping production-copilot-review as advisory.
• Deletes the now-unused required-workflow wrapper and reusable workflow that implemented the gate.
• Updates ORG-POLICY.md to document why the required gate was removed and what guarantees remain (native thread-resolution enforcement).

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
scripts/apply-org-policy.sh	Removes the required gate creation; adds cleanup of the stale production-review-gate; keeps advisory Copilot review ruleset.
ORG-POLICY.md	Updates org policy documentation to reflect removal of the required Copilot gate and explain why.
.github/workflows/required-copilot-review-gate.yml	Deleted: wrapper workflow that was used as the required check for the gate ruleset.
.github/workflows/copilot-review-gate.yml	Deleted: reusable workflow implementing the “Copilot reviewed HEAD + threads resolved” gate logic.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.