chore: add org-canonical .coderabbit.yaml

[27Bslash6]

CodeRabbit reads .coderabbit.yaml only from each repo's own root — the file at cachekit-io/.github/.coderabbit.yaml is not honored despite the GitHub convention working for CODEOWNERS / PR templates / Dependabot.

This PR adds the org-canonical CodeRabbit configuration to this repo so it takes effect:

• assertive review profile + path-specific instructions (Rust FFI safety, Python ruff/pydantic, TS strict mode, encryption-code AAD/key checks, workflow SHA-pinning, Dockerfile hygiene)
• request_changes_workflow: true (enables @coderabbitai approve / @coderabbitai resolve commands and auto-approve when comments are resolved)
• tools enabled: shellcheck, actionlint, gitleaks, ruff, yamllint, hadolint, biome, eslint

Source of truth: cachekit-io/.github/.coderabbit.yaml. Keep this file in sync when the canonical version updates.

Summary by CodeRabbit

• Chores
  • Added project configuration to use Australian English, enable automated review workflows and chat auto-replies, and broaden automated code-quality and linting checks across multiple technology stacks to improve review consistency and reporting.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 207d3c27-4aa3-42a7-95e4-ef090b9d50c6

📥 Commits

Reviewing files that changed from the base of the PR and between 140eefa and 5da70e9.

📒 Files selected for processing (1)

• .coderabbit.yaml

---

Walkthrough

Adds a new .coderabbit.yaml configuration enabling Australian English, assertive review workflows with request-changes and high-level summaries, path-scoped auto-review rules for multiple languages/file types, several automated tool integrations, and chat auto-reply.

Changes

CodeRabbit Configuration

Layer / File(s)	Summary
Global settings and review workflow configuration .coderabbit.yaml	YAML schema reference, Australian English language setting, early-access disabled, assertive review profile, request-changes workflow enabled, high-level summaries enabled, and walkthrough collapse disabled.
Auto-review path-scoped instructions and tool integrations .coderabbit.yaml	Path-based auto-review rules for Rust, Python, TypeScript, encryption-related code, GitHub workflows, and Dockerfiles with specialised checks. Automated tooling checks enabled for shellcheck, actionlint, gitleaks, ruff, yamllint, hadolint, biome, and eslint.
Chat auto-reply configuration .coderabbit.yaml	Chat auto-reply feature enabled for automated responses.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore: add org-canonical .coderabbit.yaml' clearly and concisely summarises the main change: adding a CodeRabbit configuration file at repository root.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/add-coderabbit-yaml

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.coderabbit.yaml:
- Around line 40-43: The example SHA in the instructions for the
".github/workflows/**" path is only 6 characters and contradicts the "full
40-char SHA" requirement; update the example comment string to use a realistic
40-character commit SHA (e.g., replace the short example like "`@abc123` # v6"
with a full 40-char example such as "@<40-char-sha> # v6") in the instructions
block so the example matches the stated policy.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 58631b26-9b47-430f-aedf-d1c983cf29b0

📥 Commits

Reviewing files that changed from the base of the PR and between f3a2794 and 140eefa.

📒 Files selected for processing (1)

• .coderabbit.yaml