fix: stabilize reusable codex pr review workflow

Co-Authored-By: Codex <noreply@openai.com>

Author: Pigbibi

.github/workflows/codex_pr_review.yml

@@ -13,6 +13,16 @@ on:
         description: "Stable caller-side key used to cancel stale review jobs for the same PR."
         required: false
         type: string
+      bridge_repository:
+        description: "Trusted repository containing the Codex review runner script."
+        required: false
+        type: string
+        default: "QuantStrategyLab/AIAuditBridge"
+      bridge_ref:
+        description: "Trusted ref used to checkout the Codex review runner script."
+        required: false
+        type: string
+        default: "main"
     secrets:
       CODEX_AUDIT_REUSABLE_WORKFLOW_TOKEN:
         description: "Token that can read QuantStrategyLab/AIAuditBridge when this workflow is called from another private repo."
@@ -53,8 +63,8 @@ jobs:
       - name: Checkout bridge review scripts
         uses: actions/checkout@v6
         with:
-          repository: ${{ github.repository == 'QuantStrategyLab/AIAuditBridge' && 'QuantStrategyLab/AIAuditBridge' || job.workflow_repository }}
-          ref: ${{ github.repository == 'QuantStrategyLab/AIAuditBridge' && github.event.pull_request.base.sha || job.workflow_sha }}
+          repository: ${{ inputs.bridge_repository || 'QuantStrategyLab/AIAuditBridge' }}
+          ref: ${{ inputs.bridge_ref || 'main' }}
           path: bridge
           token: ${{ secrets.CODEX_AUDIT_REUSABLE_WORKFLOW_TOKEN || github.token }}
           persist-credentials: false