ci: add CodeRabbit.ai review configuration

[don-petry]

Why?

Manual code review is time-consuming and easy to miss subtle issues in. CodeRabbit provides AI-powered review with domain-specific context (e.g., understanding that store operations need atomicity, or that CLI output must be deterministic). This complements human review rather than replacing it.

Summary

• Add .coderabbit.yaml with path-specific review instructions for store, git, and CLI modules
• Enable clippy and shellcheck review tools
• Set review profile to "chill" with auto-review on non-draft PRs

Refs #11 (item 10)

Note for maintainer

The CodeRabbit GitHub App must be installed on the oneirosoft/dagger repository for this configuration to take effect. Install it at https://coderabbit.ai — it is free for open-source repos.

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Adds CodeRabbit configuration to enable automated AI reviews with module-specific guidance and linting tool integrations.

Changes:

• Add .coderabbit.yaml with path-specific review instructions for src/core/store/**, src/core/git.rs, and src/cli/**
• Enable CodeRabbit review tools (clippy, shellcheck) and set the review profile to chill with auto-review on non-draft PRs
• Enable chat auto-replies

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

In the path instruction text, src/core/. looks like a typo (extra .). Consider changing it to src/core/ to avoid confusing readers and to match the actual directory path.

[don-petry]

Addressed in the latest push.

[don-petry]

Automated review — APPROVED

Risk: LOW
Reviewed commit: 53140a8d5fc575a4d38b3655a07029044871ad5e
Cascade: triage → deep (see triage: haiku 4.5 → deep: sonnet 4.6 + duck: gpt-5.4 → audit: opus 4.6 for models)

Summary

This PR adds a single .coderabbit.yaml configuration file that sets up CodeRabbit AI code reviews with path-specific instructions for security-sensitive modules (command injection in git.rs, atomicity in store, thin-adapter pattern in CLI). The triage escalation was caused by an invalid triage output, not a real PR signal. The file contains no secrets, no code logic, and no CI pipeline changes — risk is LOW and all gates pass.

Findings

Info

• [info] .coderabbit.yaml — Introduces CodeRabbit third-party AI review service. The config is inert until the GitHub App is installed on the repo (noted in PR body). No credentials or tokens are embedded.
• [info] (no file) — statusCheckRollup is empty — no CI checks ran against this PR. Acceptable for a config-only change with no executable code.
• [info] (no file) — mergeStateStatus is UNSTABLE, likely due to absent CI checks rather than failing checks. Not a blocker for a documentation/config-only PR.
• [info] .coderabbit.yaml — Path instructions are well-targeted: command injection guidance for git.rs, atomicity/crash-safety for store, and thin-adapter pattern for CLI. These are appropriate domain-specific hints for an AI reviewer.

CI status

No CI checks ran against this PR (statusCheckRollup is empty). This is acceptable for a config-only change with no executable code. mergeStateStatus is UNSTABLE, likely due to absent checks rather than failing ones.

Note: Approval review could not be submitted automatically (self-review restriction). Auto-merge and rebase actions will proceed as normal.

---

Reviewed by the don-petry PR-review cascade (triage: haiku 4.5 → deep: sonnet 4.6 + duck: gpt-5.4 → audit: opus 4.6). Reply with @don-petry if you need a human.