Propagate maintainer-gate fix to all repos carrying a copy

[imran-siddique]

PR #8 fixes three issues in .github/workflows/require-maintainer-approval.yml in this repo:

1. Gate never re-evaluates on review events (approval does not clear the failing status until a push)
2. Approve-then-swap: any historical APPROVED review counts, even for older commits
3. listReviews is unpaginated (first 30 reviews only)

The same workflow file is copied into other agentrust-io repos. Local working trees under C:\Users\imran\source show the copy in:

• agentrust-io/cmcp
• agentrust-io/examples
• agentrust-io/trace-spec
• agentrust-io/trace-tests
• agentrust-io/agent-manifest

(trace-registry does not carry it.)

Each copy needs the identical fix. Better: convert the gate into a reusable workflow (workflow_call) in this repo and have each repo''s copy delegate to it, so the logic only lives in one place and the copies stop drifting.

🤖 Generated with Claude Code

[imran-siddique]

All five copies already carry the fix: pull_request_review trigger, paginate(listReviews), and commit_id === headSha check. Confirmed in cmcp, examples, trace-spec, trace-tests, and agent-manifest. Closing.