How to gate AI agent pull requests on GitHub (without reading every line)

A practical setup with base-branch rules, protected paths, and an open-source GitHub Action so coding agents can't loosen their own review.