ci: pin org routing to 893749ca and refresh code-review skill

[ss-o]

Summary

• Pin the organization routing workflow in .github/workflows/org-routing.yml to z-shell/.github 893749ca2ed33b9cd229d3bac12e8524f9fc322b (was 1becebb7b98dab717d82897428afafd792d4fb97).
• Regenerate the org-routing block in AGENTS.md from that revision: the generator path in its comment now reads automation/agents/org-routing.py, and the vendored skill line names the approved revision 5593b7d28430.
• Refresh .github/skills/code-review/SKILL.md with gh skill install at the approved revision 5593b7d284304ea711de72d128a8ff8f9611205d. Its links to the organization review guidelines and integration guidance resolve again, and it asks the maintainer before a review fallback is elected.

Refs z-shell/.github#717.

Verification

• org-routing.py check --repository z-shell/zi-setup from z-shell/.github at 893749ca reports the routing as current.
• The repository has no Trunk configuration; the installer metadata keeps the two-space indentation of the previous copy.

Agent handoff

• Status: Ready for review.
• Current state: Three-file routing and skill refresh on a signed head.
• Blockers: A review of record on the current head.
• Next steps: Merge.
• Related tracker/issues: refactor(agents): organize knowledge and routing by domain .github#717.

[ss-o]

Fallback review under ADR-0026: Copilot request not registered on bd4789b

Findings

No actionable findings.

Scope: the complete diff of bd4789b against main: .github/workflows/org-routing.yml, the generated org-routing block in AGENTS.md and .github/skills/code-review/SKILL.md.

Note

This is a maintainer-elected self-review, not an independent review or approval to merge.

Validation

• Passed: org-routing.py check from z-shell/.github at 893749ca reports the routing as current, and every hosted check on this head passed, including the Org Routing workflow at the new pin.
• Skipped or unavailable: none relevant to this change.

Checklist verdicts and supporting evidence

• Workflow pin: pass. Only the reusable workflow commit changes; it is a full SHA on z-shell/.github main, and permissions and triggers are unchanged.
• Generated block: pass. The block between the markers is the generator's output at the new pin; nothing outside the markers changed.
• Vendored skill: pass. The installed copy matches the approved revision 5593b7d28430 digest, its installer metadata names that revision, and its organization links resolve on main.

Limits and follow-up

Hosted Copilot discovery of the vendored skill is not observable while the Copilot request does not register.