ci: add verifiable contributor trust gate

[Neroxsh]

????

??????????????? GitHub Action?

• ???????? Neroxsh/contributor-trust-action@v1?
  https://github.com/Neroxsh/contributor-trust-action
• ???????? 38 ??????????? PR ????? Issue ??????????
• ????? PR?? Issue ? Issue ???????????????????????????? Issue/PR ???????? PR?
• ???? GitHub Models ????????????Models ????????????
• ??????? needs-contributor-review ?????????????????????????????
• pull_request_target ?????????? PR ???
• ?? Action ?????????????????????

Closes #89

????

• ?? Action?node --test?5 ????????
• node --check dist/index.mjs ? node --check src/analyze.mjs????
• ???? GitHub API ? PR ??????????????
• ???? main ? v1 ? GitHub Actions ??????
• ? PR ?? main ??? .github/workflows/contributor-trust.yml?

AI ??????? Codex ?????????? API ????? PR ???????/????????????????????

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• .github/workflows/contributor-trust.yml is excluded by none and included by none

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 5872937f-015f-444c-90a0-8ec4c257440e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[TechQuery]

1. 我不认可对原有工作流这么大的改动：#89 (comment)
2. 建议先做成一个独立的 GitHub action，然后在本仓库引用，也方便在更多仓库复用，参考：https://github.com/freeCodeCamp-China/article-webpage-to-markdown-action

[Neroxsh]

@TechQuery 已按审查意见完成重构：核心实现拆到独立 Action https://github.com/Neroxsh/contributor-trust-action ，并发布 v1；本 PR 现在只新增调用工作流，不再改动模板或原有悬赏流程。Action 会检查公开账号资料、活动轨迹和历史投稿，可选用 GitHub Models 二次分析，但只输出报告并标记人工复核，不自动封禁。独立仓库 main/v1 CI 均已通过，烦请重新审查。

[TechQuery]

????

??????????????? GitHub Action?

• ???????? Neroxsh/contributor-trust-action@v1?
  https://github.com/Neroxsh/contributor-trust-action
• ???????? 38 ??????????? PR ????? Issue ??????????
• ????? PR?? Issue ? Issue ???????????????????????????? Issue/PR ???????? PR?
• ???? GitHub Models ????????????Models ????????????
• ??????? needs-contributor-review ?????????????????????????????
• pull_request_target ?????????? PR ???
• ?? Action ?????????????????????

Closes #89

????

• ?? Action?node --test?5 ????????
• node --check dist/index.mjs ? node --check src/analyze.mjs????
• ???? GitHub API ? PR ??????????????
• ???? main ? v1 ? GitHub Actions ??????
• ? PR ?? main ??? .github/workflows/contributor-trust.yml?

AI ??????? Codex ?????????? API ????? PR ???????/????????????????????

为什么楼主的正文都变成了乱码？@Neroxsh 你是机器人吗？