fix(noema): close document reader review gaps

[seonghobae]

Follow-up to #2172 (merged at 04d0f65).

Fixes the post-merge review findings on the canonical Noema document reader:

• normalize defusedxml entity exceptions to bounded DocumentReadError
• anchor hwp-mcp error sentinels so valid body text is not rejected
• select all document-reader files and run document-context tests in runtime-quality CI

Validation: real simple.hwp and text_only.hwpx fixtures reach the captured reviewer payload; entity and malformed DOCX cases fail closed; local owner tests, Bandit, Semgrep, gitleaks diff, pip-audit, actionlint, and syntax checks pass. No private manuscript or participant content is included.

[coderabbitai]

Warning

Review limit reached

Next included review available in 24 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 377dbea4-f482-4354-8a6e-972185a6bea3

📥 Commits

Reviewing files that changed from the base of the PR and between 04d0f65 and 25eaa9f.

📒 Files selected for processing (4)

• .github/workflows/agent-review-runtime-quality-ci.yml
• scripts/ci/noema_hwp_mcp_reader.mjs
• scripts/ci/noema_review_document.py
• tests/test_noema_document_review_context.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}