ci: align approver gate with CODEOWNERS

[esthor]

Summary

• recognize every repository-wide CODEOWNER in the existing required-approver check
• derive the failure message from the configured approver list so the check and its guidance cannot disagree
• document the governance alignment in the changelog

Why

The repository-wide CODEOWNERS entry now includes @esthor, but the verify workflow still accepted approvals from only @nehal-a2z or @juanpflores. Requiring that check in the default-branch ruleset without this update would reject an otherwise valid latest-head CODEOWNER approval.

Validation

• workflow YAML parses successfully
• the complete embedded Bash step passes bash -n
• git diff --check

This PR does not change repository settings or merge any pull request.

Summary by CodeRabbit

• Workflow Updates

  • Required approval checks now include an additional designated approver.
  • Missing-approval messages automatically reflect the current required approver list, making outstanding approvals clearer.
  • Approval validation is now aligned with the repository’s configured ownership requirements.

• Documentation

  • Updated the changelog to record the latest approval-check alignment and expanded approver coverage.

[coderabbitai]

📝 Walkthrough

Walkthrough

The required-approver workflow now includes esthor and generates missing-approval errors from the configured approver list. The changelog records alignment with repository-wide CODEOWNERS.

Changes

Required approver workflow

Layer / File(s)	Summary
Configure and report approvers .github/workflows/required-approver.yml, CHANGELOG.md	The workflow adds esthor to REQUIRED_APPROVERS. It derives the missing-approval error text from that list. The changelog records the alignment with repository-wide CODEOWNERS.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: juanpflores, nehal-a2z

Poem

A rabbit checks the names in line,
Three approvals now align and shine.
No hardcoded names hide away,
The workflow speaks from config today.
Hop, hop—CODEOWNERS leads the way!

---

Caution

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

• Ignore (reviewers only)

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Description check	❌ Error	The description explains the change and validation, but it omits the required Affected surfaces, Public references, and Checklist sections.	Add the missing template sections and complete each applicable item, or state explicitly when a section or check is not applicable.

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly describes aligning the CI approver gate with CODEOWNERS, which is the primary change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Agent Guidance Structure	✅ Passed	The PR changes only the approver workflow and CHANGELOG.md; no skills, agent guidance, native commands, or manifests are changed.

✨ Finishing Touches

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch esthor/align-approver-gate

---

_{Comment @coderabbitai help to get the list of available commands.}