fix(sync): commit baseline as codeboarding-review[bot], not codeboarding[bot]

Sync baseline commits hardcoded the author email
codeboarding[bot]@users.noreply.github.com, which GitHub resolves to a
third-party personal GitHub App (owned by an unrelated user) — so commits
showed that user's photo as the avatar instead of the CodeBoarding logo.

Attribute commits to codeboarding-review[bot] (app_id 4021464), the same
CodeBoarding App that already posts the PR review comments, so the commit
avatar is the CodeBoarding logo. Requires that App to have contents:write
and its token wired as push_token (see codeboarding-sync.yml).

The regen-loop guard now matches both the new and legacy bot emails so
baselines committed before this change don't re-trigger sync on the next
push. README updated to reflect the new identity and the github-actions[bot]
fallback when no App token is configured.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Svilen-Stefanov

.github/workflows/codeboarding-sync.yml

@@ -52,8 +52,8 @@ jobs:
       # and target repo into subdirectories, so this local checkout is untouched.
       - uses: actions/checkout@v4
       # Mint the CodeBoarding GitHub App token so the baseline commit lands as
-      # codeboarding[bot] (App avatar = the CodeBoarding logo) instead of the
-      # generic github-actions[bot]. Mirrors the review workflow's token flow.
+      # codeboarding-review[bot] (App avatar = the CodeBoarding logo) instead of
+      # the generic github-actions[bot]. Mirrors the review workflow's token flow.
       # Fails open: when App credentials are absent/invalid we fall back to
       # github.token below, and the commit shows the default Actions identity.
       # End-user repos can't reuse this — the App private key is never shipped to

README.md

@@ -173,7 +173,7 @@ In review workflows that include `issue_comment`, anyone whose comment reaches t
 
 ## Keep your architecture versioned (sync mode)
 
-With `mode: sync`, the action analyzes the pushed commit and commits the results back to the branch (as `codeboarding[bot]`), so your architecture analysis stays versioned in git and tracks the code instead of drifting from it:
+With `mode: sync`, the action analyzes the pushed commit and commits the results back to the branch (as `codeboarding-review[bot]` when the CodeBoarding GitHub App token is configured, otherwise `github-actions[bot]`), so your architecture analysis stays versioned in git and tracks the code instead of drifting from it:
 
 - `.codeboarding/*.md` — rendered architecture docs: `overview.md` plus one page per component (directory configurable via `output_dir`).
 - `.codeboarding/analysis.json` — the machine-readable analysis, which doubles as the baseline that review mode diffs against.

action.yml

@@ -231,14 +231,20 @@ runs:
             skip "Sync mode runs on branch pushes, not tag pushes."
           fi
           # Regen-loop guard: never re-analyze our OWN baseline commit. Sync
-          # commits as codeboarding[bot]; if a push's head commit is ours, skip.
+          # commits as codeboarding-review[bot]; if a push's head commit is ours,
+          # skip. The legacy codeboarding[bot] email is still matched so baselines
+          # committed before the identity change don't re-trigger on the next push.
           # This holds even if a consumer omits the workflow's paths-ignore (the
           # primary guard), and replaces the old "[skip ci]" marker — which
           # leaked into squash-merge commit messages and wrongly skipped the
           # workflows real merges should run (sync itself, release tooling, CI).
-          if [ "$EVENT" = "push" ] && [ "$HEAD_AUTHOR_EMAIL" = "codeboarding[bot]@users.noreply.github.com" ]; then
-            skip "Push head commit is CodeBoarding's own baseline commit; not re-analyzing (loop guard)."
-          fi
+          case "$HEAD_AUTHOR_EMAIL" in
+            "codeboarding-review[bot]@users.noreply.github.com"|"codeboarding[bot]@users.noreply.github.com")
+              if [ "$EVENT" = "push" ]; then
+                skip "Push head commit is CodeBoarding's own baseline commit; not re-analyzing (loop guard)."
+              fi
+              ;;
+          esac
           case "$OUTPUT_FORMAT" in
             .md) ;;
             *) echo "::error::output_format must be .md."; exit 1 ;;
@@ -1593,8 +1599,8 @@ runs:
           exit 0
         fi
 
-        git config user.name "codeboarding[bot]"
-        git config user.email "codeboarding[bot]@users.noreply.github.com"
+        git config user.name "codeboarding-review[bot]"
+        git config user.email "codeboarding-review[bot]@users.noreply.github.com"
         git commit -m "$COMMIT_MESSAGE" >/dev/null
 
         # Push with fetch+rebase retries: another push may land on target_branch