feat(naoru-ai): add naoru AI failure diagnosis to core build/deploy workflows

.github/workflows/cf-deploy.yml

@@ -74,6 +74,9 @@ on:
       GITHUB:
         required: false
         description: 'GitHub token'
+      NAORU_API_KEY:
+        required: false
+        description: 'API key for naoru AI failure diagnosis (OpenRouter provider by default).'
 
 jobs:
   deploy-cf-stack:
@@ -115,4 +118,24 @@ jobs:
           no-fail-on-empty-changeset: "1"
           parameter-overrides: ${{ inputs.parameter-overrides }}
           capabilities: ${{ inputs.capabilities }}
+
+  naoru:
+    name: 🩺 Diagnose failure (naoru)
+    needs: [deploy-cf-stack]
+    if: ${{ failure() }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+      pull-requests: write
+    steps:
+      - name: 🩺 Diagnose with naoru
+        env:
+          NAORU_KEY: ${{ secrets.NAORU_API_KEY }}
+        if: ${{ env.NAORU_KEY != '' }}
+        uses: clouddrove/naoru@v0
+        with:
+          api-key: ${{ secrets.NAORU_API_KEY }}
+          provider: openrouter
+          model: openai/gpt-4o
 ...

.github/workflows/ci.yml

@@ -371,3 +371,23 @@ jobs:
           echo "- Total Documentation Files: $doc_count" >> $GITHUB_STEP_SUMMARY
           echo "" >> $GITHUB_STEP_SUMMARY
           echo "✅ All checks completed!"
+
+  naoru:
+    name: 🩺 Diagnose failure (naoru)
+    needs: [validate-yaml, lint-yaml, validate-workflows, security-scan, validate-docs, validate-naming, actionlint, generate-docs, check-deprecated, validate-permissions]
+    if: ${{ failure() }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+      pull-requests: write
+    steps:
+      - name: 🩺 Diagnose with naoru
+        env:
+          NAORU_KEY: ${{ secrets.NAORU_API_KEY }}
+        if: ${{ env.NAORU_KEY != '' }}
+        uses: clouddrove/naoru@v0
+        with:
+          api-key: ${{ secrets.NAORU_API_KEY }}
+          provider: openrouter
+          model: openai/gpt-4o

.github/workflows/docker-build-push.yml

@@ -48,6 +48,9 @@ on:
       DOCKERHUB_PASSWORD:
         description: 'dockerhub password'
         required: false
+      NAORU_API_KEY:
+        required: false
+        description: 'API key for naoru AI failure diagnosis (OpenRouter provider by default).'
 
 jobs:
   build-image:
@@ -127,4 +130,24 @@ jobs:
           docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
           docker build -t $images:$IMAGE_TAG $BUILD_PATH
           docker push $images:$IMAGE_TAG
+
+  naoru:
+    name: 🩺 Diagnose failure (naoru)
+    needs: [build-image]
+    if: ${{ failure() }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+      pull-requests: write
+    steps:
+      - name: 🩺 Diagnose with naoru
+        env:
+          NAORU_KEY: ${{ secrets.NAORU_API_KEY }}
+        if: ${{ env.NAORU_KEY != '' }}
+        uses: clouddrove/naoru@v0
+        with:
+          api-key: ${{ secrets.NAORU_API_KEY }}
+          provider: openrouter
+          model: openai/gpt-4o
 ...

.github/workflows/helm-deploy.yml

@@ -108,6 +108,9 @@ on:
       set-parameters:
         required: false
         description: 'Overriding the default values using --set flag'
+      NAORU_API_KEY:
+        required: false
+        description: 'API key for naoru AI failure diagnosis (OpenRouter provider by default).'
 jobs:
   helm-action:
     runs-on: ubuntu-latest
@@ -223,4 +226,24 @@ jobs:
         if: ${{ inputs.uninstall == true }}
         run: |
           helm uninstall ${{ inputs.release-name }} -n ${{ inputs.namespace }}
+
+  naoru:
+    name: 🩺 Diagnose failure (naoru)
+    needs: [helm-action]
+    if: ${{ failure() }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+      pull-requests: write
+    steps:
+      - name: 🩺 Diagnose with naoru
+        env:
+          NAORU_KEY: ${{ secrets.NAORU_API_KEY }}
+        if: ${{ env.NAORU_KEY != '' }}
+        uses: clouddrove/naoru@v0
+        with:
+          api-key: ${{ secrets.NAORU_API_KEY }}
+          provider: openrouter
+          model: openai/gpt-4o
 ...

.github/workflows/tf-workflow.yml

@@ -123,6 +123,9 @@ on:
       SSH_PRIVATE_KEY:
         required: false
         description: 'Private SSH key to register in the SSH agent'
+      NAORU_API_KEY:
+        required: false
+        description: 'API key for naoru AI failure diagnosis (OpenRouter provider by default).'
 
 jobs:
   terraform-workflow:
@@ -413,3 +416,23 @@ jobs:
           else
             terraform destroy -auto-approve
           fi
+
+  naoru:
+    name: 🩺 Diagnose failure (naoru)
+    needs: [terraform-workflow]
+    if: ${{ failure() }}
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read
+      pull-requests: write
+    steps:
+      - name: 🩺 Diagnose with naoru
+        env:
+          NAORU_KEY: ${{ secrets.NAORU_API_KEY }}
+        if: ${{ env.NAORU_KEY != '' }}
+        uses: clouddrove/naoru@v0
+        with:
+          api-key: ${{ secrets.NAORU_API_KEY }}
+          provider: openrouter
+          model: openai/gpt-4o