fix(pr-sous-chef): deterministic nudge spam filter via hidden marker

[Copilot]

pr-sous-chef was suppressing repeat nudges using fuzzy text matching ("pr-sous-chef" in latest comment), which is non-deterministic and vulnerable to false positives/negatives. This change makes repeat-detection deterministic by requiring and checking a dedicated hidden marker in sous-chef-generated nudges.

• Deterministic latest-comment filter

  • Replaced freeform string matching with exact marker detection in the candidate prefilter.
  • Added a single marker constant used by the filter:
    • <!-- gh-aw-pr-sous-chef-nudge -->

• Prompt contract update for nudge generation

  • Updated workflow instructions so every sous-chef nudge comment includes the hidden marker.
  • Updated skip-rule wording to explicitly key off marker presence in the latest comment.

• Compiled workflow parity

  • Applied the same logic change to both source and compiled workflow files:
    • .github/workflows/pr-sous-chef.md
    • .github/workflows/pr-sous-chef.lock.yml

sous_chef_nudge_marker='<!-- gh-aw-pr-sous-chef-nudge -->'

last_comment_is_sous_chef="$(
  gh api "repos/$GH_AW_GITHUB_REPOSITORY/issues/$pr_number/comments?per_page=1&sort=created&direction=desc" \
    --jq '
      if length == 0 then false
      else ((.[0].body // "" | contains($marker))) end
    ' --arg marker "$sous_chef_nudge_marker" 2>/dev/null || echo "false"
)"

[Copilot]

Pull request overview

This PR replaces fuzzy pr-sous-chef repeat-nudge detection with a hidden marker-based check and updates the workflow prompt to require that marker in generated nudges.

Changes:

• Adds a hidden nudge marker variable to the PR candidate prefilter.
• Updates latest-comment filtering to look for the marker.
• Updates sous-chef prompt instructions and compiled workflow parity.

Show a summary per file

File	Description
.github/workflows/pr-sous-chef.md	Adds marker-based filtering and prompt contract updates.
.github/workflows/pr-sous-chef.lock.yml	Mirrors the compiled workflow changes for marker-based filtering.
pkg/workflow/safe_jobs_threat_detection_test.go	Removes an extra blank line.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 3/3 changed files
• Comments generated: 2