Check out before downloading the review artifact

actions/checkout cleans the workspace, so running it after the artifact
download and the resolve step wiped changed_files.txt and review-data,
leaving the poster with nothing to post.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: MostCromulent

.github/workflows/card-script-review.yml

@@ -37,6 +37,11 @@ jobs:
     # Only PR builds carry review data; push builds have nothing to comment on.
     if: github.event.workflow_run.event == 'pull_request'
     steps:
+      # Check out first: actions/checkout cleans the workspace, so it must run
+      # before the artifact download and the files the resolve step writes.
+      - name: Check out base scripts and corpus
+        uses: actions/checkout@v5
+
       - name: Download review data from the build
         uses: actions/download-artifact@v4
         with:
@@ -85,10 +90,6 @@ jobs:
             fs.writeFileSync('diff_lines.json', JSON.stringify(addedLines));
             core.info(`${cards.length} changed card file(s)`);
 
-      - name: Check out base scripts and corpus
-        if: steps.pr.outputs.pull_number != ''
-        uses: actions/checkout@v5
-
       - name: Set up Python
         if: steps.pr.outputs.pull_number != ''
         uses: actions/setup-python@v6