GitHub Actions architecture review gate for Azure pull requests

Add an architecture review gate to GitHub pull requests: a GitHub Actions job that checks Well-Architected score, high-risk findings and cost before merge.