refactor(gitlab): rename template to droid-review.yml; ship as two-file pattern

Component template renamed from gitlab/templates/review.yml to
gitlab/templates/droid-review.yml. Customer drops a self-contained
factory/droid-review.yml in their project and adds a single
`include: - local:` line to their .gitlab-ci.yml, mirroring the
GitHub action's `.github/workflows/droid-review.yml` model.

Examples restructured to reflect the two-file layout. Docs + README
snippets updated accordingly.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>

Author: factory-nizar

README.md

@@ -42,11 +42,13 @@ For GitHub-only setups you can also run `/install-github-app`. See the [Automate
 
 GitLab support ships as a **GitLab CI/CD Component** that delivers automated code review — inline MR comments on every merge request, with optional security review.
 
-Minimal `.gitlab-ci.yml`:
+Two files in your project:
+
+`factory/droid-review.yml`:
 
 ```yaml
 include:
-  - remote: "https://raw.githubusercontent.com/Factory-AI/droid-action/main/gitlab/templates/review.yml"
+  - remote: "https://raw.githubusercontent.com/Factory-AI/droid-action/main/gitlab/templates/droid-review.yml"
     inputs:
       automatic_review: "true"
       automatic_security_review: "false"
@@ -58,6 +60,13 @@ droid-review:
     GITLAB_TOKEN: $GITLAB_TOKEN
 ```
 
+`.gitlab-ci.yml` (one include line, append to existing if present):
+
+```yaml
+include:
+  - local: "factory/droid-review.yml"
+```
+
 Full setup, available inputs, and troubleshooting live in [`docs/gitlab-setup.md`](docs/gitlab-setup.md).
 
 ### Manual Setup

docs/gitlab-setup.md

@@ -17,8 +17,9 @@ droid
 
 It detects GitLab, asks which account should be the poster of review
 comments (you supply its PAT as `GITLAB_TOKEN`), asks the configuration
-questions below, generates the `.gitlab-ci.yml`, and opens an MR /
-direct-commits to the target project(s).
+questions below, drops `factory/droid-review.yml` in your project, wires
+it into `.gitlab-ci.yml`, and opens an MR / direct-commits to the target
+project(s).
 
 ## Manual installation
 
@@ -32,16 +33,17 @@ direct-commits to the target project(s).
 
 ### 2. Add the CI/CD Component
 
-Drop-in samples live in [`gitlab/examples/`](../gitlab/examples/):
+Drop-in samples live in [`gitlab/examples/`](../gitlab/examples/). The
+layout is two files:
 
-- [`.gitlab-ci.minimal.yml`](../gitlab/examples/.gitlab-ci.minimal.yml) — shortest possible, accepts every default.
-- [`.gitlab-ci.example.yml`](../gitlab/examples/.gitlab-ci.example.yml) — annotated with every input.
+- [`factory/droid-review.yml`](../gitlab/examples/factory/droid-review.yml) — self-contained config (include + inputs + variables). Drop verbatim.
+- [`.gitlab-ci.yml`](../gitlab/examples/.gitlab-ci.yml) — project-root entry point. If you already have one, append the include line below to its `include:` block.
 
-The minimal form looks like this; create or extend `.gitlab-ci.yml` in your project with:
+**`factory/droid-review.yml`** (drop into your project):
 
 ```yaml
 include:
-  - remote: "https://raw.githubusercontent.com/Factory-AI/droid-action/main/gitlab/templates/review.yml"
+  - remote: "https://raw.githubusercontent.com/Factory-AI/droid-action/main/gitlab/templates/droid-review.yml"
     inputs:
       automatic_review: "true"
       automatic_security_review: "false"
@@ -56,8 +58,15 @@ droid-review:
     GITLAB_TOKEN: $GITLAB_TOKEN
 ```
 
-> The `include:` URL is pinned to `@main`, which tracks the latest stable
-> cut of droid-action.
+**`.gitlab-ci.yml`** (project root, just needs the one include line):
+
+```yaml
+include:
+  - local: "factory/droid-review.yml"
+```
+
+> The remote `include:` URL is pinned to `@main`, which tracks the
+> latest stable cut of droid-action.
 
 ### 3. Push an MR
 

gitlab/examples/.gitlab-ci.example.yml

@@ -0,0 +1,9 @@
+# Example project-root .gitlab-ci.yml.
+#
+# If the project doesn't have a .gitlab-ci.yml yet, create one with at
+# minimum the include line below. If it already has one, just append the
+# `- local: "factory/droid-review.yml"` entry to its existing `include:`
+# block (or add a new `include:` block if there isn't one).
+
+include:
+  - local: "factory/droid-review.yml"

gitlab/examples/.gitlab-ci.minimal.yml

@@ -1,23 +1,21 @@
 # GitLab examples
 
-Drop-in `.gitlab-ci.yml` samples for consuming the droid-action GitLab
-CI/CD Component.
+Two-file layout for consuming the droid-action GitLab CI/CD Component:
 
-| File                     | When to use                                                                                                    |
-| ------------------------ | -------------------------------------------------------------------------------------------------------------- |
-| `.gitlab-ci.minimal.yml` | Shortest possible — `include:` the review template, accept every default. Good starting point.                 |
-| `.gitlab-ci.example.yml` | Annotated. Every input spelled out with comments explaining what it does and what the safe defaults look like. |
+```
+your-project/
+├── .gitlab-ci.yml                  # gains one `include:` line
+└── factory/
+    └── droid-review.yml            # self-contained droid-review config
+```
 
-Both samples wire the same two required CI/CD variables:
+| File                          | Where it lives in your project                     | Purpose                                                                                       |
+| ----------------------------- | -------------------------------------------------- | --------------------------------------------------------------------------------------------- |
+| `factory/droid-review.yml`    | drop verbatim                                      | Self-contained config: includes the remote Component, sets inputs, wires CI/CD variables.     |
+| `.gitlab-ci.yml`              | append one `include:` line if the file exists      | Project-root entry point. Just needs to include `factory/droid-review.yml`.                   |
 
-- `FACTORY_API_KEY` — get one at <https://app.factory.ai/settings/api-keys>.
-- `GITLAB_TOKEN` — a personal access token with `api` scope, owned by
-  whichever GitLab user/account should be the poster of review comments.
-  To change the poster later, replace this variable's value.
+The two required CI/CD variables (`FACTORY_API_KEY`, `GITLAB_TOKEN`) are set
+in the GitLab UI under **Project → Settings → CI/CD → Variables** (or at
+the group level for org-wide rollout), masked and unprotected.
 
-Set both as **masked** CI/CD variables at the level you want the review
-to apply (project, subgroup, or top-level group).
-
-For the full input reference (model overrides, security review,
-suggestion blocks, etc.) see the docs at
-[`docs/gitlab-setup.md`](../../docs/gitlab-setup.md).
+For the full input reference see the docs at [`docs/gitlab-setup.md`](../../docs/gitlab-setup.md).

gitlab/examples/.gitlab-ci.yml

@@ -0,0 +1,29 @@
+# factory/droid-review.yml
+#
+# Drop this file at `factory/droid-review.yml` in your project, then
+# add a single `include: - local: "factory/droid-review.yml"` line to
+# your `.gitlab-ci.yml` (see ../.gitlab-ci.yml for the entry-point
+# example).
+#
+# Prerequisites (one-time, set in Project / Group → Settings → CI/CD):
+#
+#   * FACTORY_API_KEY — masked variable. Get one at
+#     https://app.factory.ai/settings/api-keys
+#   * GITLAB_TOKEN    — masked variable. A personal access token with
+#     `api` scope, owned by whichever GitLab account should post review
+#     comments. The token owner IS the poster.
+
+include:
+  - remote: "https://raw.githubusercontent.com/Factory-AI/droid-action/main/gitlab/templates/droid-review.yml"
+    inputs:
+      automatic_review: "true" # run on every MR event; "false" disables
+      review_depth: "deep" # "deep" (thorough) or "shallow" (fast)
+      include_suggestions: "true" # post code-suggestion blocks for high-confidence fixes
+      automatic_security_review: "false" # enable to flag vulns alongside the regular review
+      security_block_on_critical: "true" # block merge on CRITICAL findings (when security review is on)
+      security_block_on_high: "false" # block merge on HIGH findings
+
+droid-review:
+  variables:
+    FACTORY_API_KEY: $FACTORY_API_KEY
+    GITLAB_TOKEN: $GITLAB_TOKEN