GitLab/Gitea webhook server (optional)

[ajianaz]

Webhook Server

Add an optional webhook server for GitLab and Gitea integration, enabling automatic code review on merge requests.

Features

• Lightweight HTTP server (behind a feature flag)
• Receives webhook events from GitLab/Gitea
• Triggers cora review on MR/PR diff
• Posts review comments back via API
• Configurable port and webhook secret

Usage

cora serve --port 8080 --gitlab --secret my-secret

Requirements

• Feature-gated (--features webhook-server)
• Axum or actix-web based HTTP server
• GitLab and Gitea webhook payload parsing
• HMAC signature verification
• Async review processing

Acceptance Criteria

• Receives and parses GitLab MR webhooks
• Posts review comments to MR
• Verifies webhook signatures
• Feature-gated so it does not add deps for CLI-only users

[ajianaz]

Post-launch priority — tracked for future release