chore: pin hard-failure drift review bridge

[Pigbibi]

Summary

• pin AIAuditBridge hard-failure aggregation fix for reusable drift review

Validation

• python3 -m pytest -q tests/test_reusable_drift_workflow.py
• actionlint .github/workflows/reusable-drift-check.yml
• git diff --check

[github-actions]

🤖 Codex PR Review

⚠️ Review unavailable: Codex review quota or capacity is unavailable. No direct paid API fallback was used; required CI checks remain the merge gate.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b92e76ef7e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Pin a bridge build that trusts this workflow SHA

When strategy repos rotate their reusable drift caller to this new QPK revision, the Codex primary review will be rejected by the audit service before any dual review can run: I checked the pinned AIAuditBridge revision 66b1107..., and its service deployment allowlist still only includes QuantPlatformKit/.github/workflows/reusable-drift-check.yml@644cd900... and @d0a081ca..., not this workflow revision. Because run_codex_service_review authenticates with the GitHub OIDC token and the service validates job_workflow_ref, critical-drift runs with CODEX_AUDIT_SERVICE_URL configured will fail with an auth error instead of producing the durable review/issue path this workflow expects.

Useful? React with 👍 / 👎.