Apply PR review feedback: fix dependency-review permissions and simplify coverage summary

Agent-Logs-Url: https://github.com/precise-alloy/regression-test/sessions/7825985b-3655-4410-8a6d-f9977b97fc67

Co-authored-by: tuyen-at-work <68000455+tuyen-at-work@users.noreply.github.com>

Author: Copilot

.github/workflows/code-quality.yml

@@ -29,6 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
+      pull-requests: read
     steps:
       - name: Checkout code
         uses: actions/checkout@v5
@@ -89,28 +90,20 @@ jobs:
 
           const summaryPath = 'coverage/coverage-summary.json';
           const summary = JSON.parse(fs.readFileSync(summaryPath, 'utf8')).total;
-          const thresholds = {
-            lines: 94,
-            functions: 94,
-            statements: 94,
-            branches: 90,
-          };
           const metrics = ['lines', 'functions', 'statements', 'branches'];
           const rows = metrics.map((metric) => {
             const value = summary[metric]?.pct ?? 0;
-            const threshold = thresholds[metric];
-            const status = value >= threshold ? 'PASS' : 'FAIL';
-            return `| ${metric} | ${value.toFixed(2)}% | ${threshold}% | ${status} |`;
+            return `| ${metric} | ${value.toFixed(2)}% |`;
           });
 
           const markdown = [
             '## Coverage Summary',
             '',
-            '| Metric | Coverage | Threshold | Status |',
-            '| --- | ---: | ---: | :---: |',
+            '| Metric | Coverage |',
+            '| --- | ---: |',
             ...rows,
             '',
-            'Full HTML coverage report is attached as a workflow artifact.',
+            'Coverage thresholds are enforced by the test runner configuration.',
             '',
           ].join('\n');