docs: update GitHub Actions page with slash-command workflows

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: bryan-cox

docs/content/how-to/ci/github-actions.md

@@ -1,8 +1,8 @@
-# GitHub Actions Workflows
+# 🔄 GitHub Actions Workflows
 
 HyperShift uses GitHub Actions for lightweight CI checks that run on every pull request. These workflows complement the heavier Prow-based e2e tests by providing fast feedback on code quality, formatting, and documentation.
 
-## Reusable Workflow Architecture
+## 🏗️ Reusable Workflow Architecture
 
 All GHA workflows follow a **caller + reusable** pattern:
 
@@ -23,15 +23,15 @@ flowchart LR
 
 This pattern provides:
 
-- **Consistency** — all PR and push workflows share the same job definitions.
-- **Maintainability** — job logic is defined once in the reusable workflow and updated in a single place.
-- **Security** — callers pin reusable workflows to `@main`, reducing the risk of PRs altering reusable job logic. Caller workflows are protected by branch protection rules and CODEOWNERS.
+- ✅ **Consistency** — all PR and push workflows share the same job definitions.
+- 🔧 **Maintainability** — job logic is defined once in the reusable workflow and updated in a single place.
+- 🔒 **Security** — callers pin reusable workflows to `@main`, reducing the risk of PRs altering reusable job logic. Caller workflows are protected by branch protection rules and CODEOWNERS.
 
-## Workflows
+## 📋 Workflows
 
 All workflows run on self-hosted ARC runners and target the `main` and `release-4.22` branches.
 
-### Code Quality
+### 🧹 Code Quality
 
 | Caller | Reusable | Purpose |
 |--------|----------|---------|
@@ -40,32 +40,58 @@ All workflows run on self-hosted ARC runners and target the `main` and `release-
 | `lint.yaml` | `lint-reusable.yaml` | Go linting via `golangci-lint` |
 | `verify.yaml` | `verify-reusable.yaml` | Full verification (`make verify`) |
 
-### Testing
+### 🧪 Testing
 
 | Caller | Reusable | Purpose |
 |--------|----------|---------|
 | `test.yaml` | `test-reusable.yaml` | Unit tests with race detection and Codecov upload |
 | `envtest-ocp.yaml` | `envtest-ocp-reusable.yaml` | CRD validation tests against OpenShift k8s versions |
 | `envtest-kube.yaml` | `envtest-kube-reusable.yaml` | CRD validation tests against vanilla k8s versions |
 
-### Documentation
+### 📖 Documentation
 
 | Caller | Reusable | Purpose |
 |--------|----------|---------|
 | `docs-build.yaml` | `docs-build-reusable.yaml` | Build MkDocs site in strict mode |
 
-The `docs-deploy.yaml` workflow is not a reusable workflow pair — it triggers via `workflow_run` after the Docs Build completes to deploy the preview. See [Documentation Preview](docs-preview.md) for details.
+!!! info
+    The `docs-deploy.yaml` workflow is not a reusable workflow pair — it triggers via `workflow_run` after the Docs Build completes to deploy the preview. See [Documentation Preview](docs-preview.md) for details.
 
-### Other
+### 🤖 PR Slash Commands
+
+These workflows are triggered by posting a **slash command** as a comment on a pull request. They are powered by [Claude Code](https://docs.anthropic.com/en/docs/claude-code) via the shared `reusable-claude-on-pr.yaml` workflow, which handles checking out the PR branch, authenticating to GCP (for Vertex AI), and running Claude with the appropriate prompt.
+
+!!! warning "Permissions"
+    Only organization **members**, **owners**, and **collaborators** can trigger these commands. Comments from external contributors are ignored.
+
+| Command | Workflow | What it does |
+|---------|----------|--------------|
+| `/address-review-comments` | `address-review-comments.yaml` | Reads open review comments on the PR and pushes commits to address them |
+| `/rebase` | `rebase.yaml` | Rebases the PR branch onto the latest `main` and force-pushes |
+| `/restructure-commits` | `restructure-commits.yaml` | Reorganizes the PR's commits into logical units with conventional commit messages |
+
+**How it works:**
+
+1. Post the slash command (e.g., `/rebase`) as a comment on a PR.
+2. The workflow posts a 🔗 reply comment linking to the Actions run so you can follow progress.
+3. Claude checks out the PR branch, performs the requested operation, and pushes the result.
+
+!!! tip
+    Each command uses concurrency groups scoped to the PR number — re-triggering a command automatically cancels the previous run for that PR.
+
+### 🔧 Other
 
 | Caller | Reusable | Purpose |
 |--------|----------|---------|
 | `cpo-container-sync.yaml` | `cpo-container-sync-reusable.yaml` | Validate CPO container image references are in sync |
 | `dependabot-commit-fix.yaml` | `dependabot-commit-fix-reusable.yaml` | Rewrite dependabot commit messages to pass gitlint |
+| `gocacheprog-test.yaml` | `gocacheprog-test-reusable.yaml` | Tests for the `contrib/ci/gocacheprog` build cache tool (path-filtered) |
+| `validate-cpo-overrides.yaml` | — | Validate CPO override images exist and are pullable |
 
-The `sync-community-fork.yaml` workflow runs on push to `main` only (not on PRs) and does not use the reusable pattern. See [Sync Community Fork](sync-community-fork.md) for details.
+!!! note
+    The `sync-community-fork.yaml` workflow runs on push to `main` only (not on PRs) and does not use the reusable pattern. See [Sync Community Fork](sync-community-fork.md) for details.
 
-## Adding a New Workflow
+## ➕ Adding a New Workflow
 
 To add a new GHA workflow:
 
@@ -74,20 +100,19 @@ To add a new GHA workflow:
 3. Add branch filters for `main` and any active release branches.
 4. Use `arc-runner-set` as the runner.
 
-Example caller:
-
-```yaml
-name: My Check
-
-on:
-  pull_request:
-    branches:
-      - main
-      - release-4.22
-
-jobs:
-  my-check:
-    uses: openshift/hypershift/.github/workflows/my-check-reusable.yaml@main
-    permissions:
-      contents: read
-```
+??? example "Example caller workflow"
+    ```yaml
+    name: My Check
+
+    on:
+      pull_request:
+        branches:
+          - main
+          - release-4.22
+
+    jobs:
+      my-check:
+        uses: openshift/hypershift/.github/workflows/my-check-reusable.yaml@main
+        permissions:
+          contents: read
+    ```