fix: harden workflow_run coordinator wakes

[coygeek]

Summary

• restrict example workflow_run wakeups to same-repository non-PR CI on the default branch
• add an explicit completed-conclusion allowlist while preserving failure wakeups for pipeline pause handling
• document how to adapt the branch guard for protected release branches
• update example workflow validation assertions

Closes #20

Verification

• PATH="$PWD/.venv/bin:$PATH" python3 -m pytest -q
• ./.venv/bin/ruff check src tests
• ./.venv/bin/python -m unittest discover -s tests -v
• ./.venv/bin/python -m build
• autoreview --mode local --engine droid: clean; default Codex autoreview hit account usage limit after retries

[mberman84]

Requesting one portability fix. The README tells users to install this example on the repository's default branch, but the new static trigger silently disables workflow_run wakeups when that branch is named master, trunk, or anything other than main. Keep the same-repository/non-PR/default-branch job guard, but remove the static filter or substitute the actual branch during installation and document that step. GitHub CI is still action_required; re-request review after updating the head.

[mberman84]

Hard-coding main makes the reusable example stop receiving workflow_run events for repositories with a differently named default branch, even though the job guard below is correctly dynamic. Remove this static filter and rely on the guard, or make installation substitute the repository's actual default branch and document/test that substitution.

[coygeek]

Addressed the review feedback in the updated head. Removed the hard-coded workflow_run.branches: [main] filter and kept the portable job-level guard against github.event.repository.default_branch, with the protected-release-branch adaptation note next to that dynamic guard.

Verification: PYTHONPATH=src uv run --with pytest --with ruff python -m pytest tests/test_skill.py -q and uv run --with ruff ruff check src tests both pass.

[mberman84]

Re-reviewed and repaired on latest main. Moved YAML guidance outside the folded expression, excluded both pull_request and pull_request_target wakeups, and added regression assertions. Full suite: 227 passed, 3 skipped, 202 subtests; Ruff clean; final structured autoreview clean.